<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Horizon VM to Zero Client Link in VMware Aria Operations for Logs Discussions</title>
    <link>https://communities.vmware.com/t5/VMware-Aria-Operations-for-Logs/Horizon-VM-to-Zero-Client-Link/m-p/1416637#M1189</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P style="margin-bottom: 8.5px; color: #333333; font-family: Helvetica, Arial, sans-serif;"&gt;Trying to get log insight to grab the C:\ProgramData\VMware\VDM\logs\pcoip_server_2017_04_24_0000111c.txt file so that we can draw a line from a VDI session to a human on the other end of a zero client (we are a school district - kids are abusive on the equipment)&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P style="margin-bottom: 8.5px; color: #333333; font-family: Helvetica, Arial, sans-serif;"&gt;There is a handy line in this file that tells me the IP of the zero client (man DNS resolution would be nice) but I can work with this because I have my DHCP logs being absorbed by insight as well.&lt;/P&gt;&lt;P style="margin-bottom: 8.5px; color: #333333; font-family: Helvetica, Arial, sans-serif;"&gt;MGMT_SSIG :Received session INVITE (172.24.132.97, 00-1F-D8-01-1F-C4, PRI: 0)&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P style="margin-bottom: 8.5px; color: #333333; font-family: Helvetica, Arial, sans-serif;"&gt;So from here I can get the IP, the VM name and then compare with other logging get the user name.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P style="margin-bottom: 8.5px; color: #333333; font-family: Helvetica, Arial, sans-serif;"&gt;However I have in the agent to grab this with the Horizon Agent template, but not seeing it.&lt;/P&gt;&lt;P style="margin-bottom: 8.5px; color: #333333; font-family: Helvetica, Arial, sans-serif;"&gt;[filelog|PcoipAgentLogs]&lt;/P&gt;&lt;P style="margin-bottom: 8.5px; color: #333333; font-family: Helvetica, Arial, sans-serif;"&gt;directory=C:\ProgramData\VMware\VDM\logs&lt;/P&gt;&lt;P style="margin-bottom: 8.5px; color: #333333; font-family: Helvetica, Arial, sans-serif;"&gt;include=*.txt;*.log&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P style="margin-bottom: 8.5px; color: #333333; font-family: Helvetica, Arial, sans-serif;"&gt;What am I missing?&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Mon, 24 Apr 2017 23:18:19 GMT</pubDate>
    <dc:creator>jwellner</dc:creator>
    <dc:date>2017-04-24T23:18:19Z</dc:date>
    <item>
      <title>Horizon VM to Zero Client Link</title>
      <link>https://communities.vmware.com/t5/VMware-Aria-Operations-for-Logs/Horizon-VM-to-Zero-Client-Link/m-p/1416637#M1189</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P style="margin-bottom: 8.5px; color: #333333; font-family: Helvetica, Arial, sans-serif;"&gt;Trying to get log insight to grab the C:\ProgramData\VMware\VDM\logs\pcoip_server_2017_04_24_0000111c.txt file so that we can draw a line from a VDI session to a human on the other end of a zero client (we are a school district - kids are abusive on the equipment)&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P style="margin-bottom: 8.5px; color: #333333; font-family: Helvetica, Arial, sans-serif;"&gt;There is a handy line in this file that tells me the IP of the zero client (man DNS resolution would be nice) but I can work with this because I have my DHCP logs being absorbed by insight as well.&lt;/P&gt;&lt;P style="margin-bottom: 8.5px; color: #333333; font-family: Helvetica, Arial, sans-serif;"&gt;MGMT_SSIG :Received session INVITE (172.24.132.97, 00-1F-D8-01-1F-C4, PRI: 0)&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P style="margin-bottom: 8.5px; color: #333333; font-family: Helvetica, Arial, sans-serif;"&gt;So from here I can get the IP, the VM name and then compare with other logging get the user name.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P style="margin-bottom: 8.5px; color: #333333; font-family: Helvetica, Arial, sans-serif;"&gt;However I have in the agent to grab this with the Horizon Agent template, but not seeing it.&lt;/P&gt;&lt;P style="margin-bottom: 8.5px; color: #333333; font-family: Helvetica, Arial, sans-serif;"&gt;[filelog|PcoipAgentLogs]&lt;/P&gt;&lt;P style="margin-bottom: 8.5px; color: #333333; font-family: Helvetica, Arial, sans-serif;"&gt;directory=C:\ProgramData\VMware\VDM\logs&lt;/P&gt;&lt;P style="margin-bottom: 8.5px; color: #333333; font-family: Helvetica, Arial, sans-serif;"&gt;include=*.txt;*.log&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P style="margin-bottom: 8.5px; color: #333333; font-family: Helvetica, Arial, sans-serif;"&gt;What am I missing?&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 24 Apr 2017 23:18:19 GMT</pubDate>
      <guid>https://communities.vmware.com/t5/VMware-Aria-Operations-for-Logs/Horizon-VM-to-Zero-Client-Link/m-p/1416637#M1189</guid>
      <dc:creator>jwellner</dc:creator>
      <dc:date>2017-04-24T23:18:19Z</dc:date>
    </item>
    <item>
      <title>Re: Horizon VM to Zero Client Link</title>
      <link>https://communities.vmware.com/t5/VMware-Aria-Operations-for-Logs/Horizon-VM-to-Zero-Client-Link/m-p/1416638#M1190</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;I have no idea why I did not respond to this earlier ... I apologize . I did work on it on 24th April ...doh! Anyway this is the filelog I used to import the data correctly into Log insight &lt;/P&gt;&lt;P&gt;[filelog|yogi_importer_test]&lt;/P&gt;&lt;P&gt;directory = **&lt;/P&gt;&lt;P&gt;include = *&lt;/P&gt;&lt;P&gt;tags={"product":"pcoip"}&lt;/P&gt;&lt;P&gt;event_marker=^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}.\d{3}-&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;So all you need is the event_marker line in your and it should work. Let me know if it doesn't and I can help you over a webex if needed. Once again sorry for the delay.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 10 May 2017 18:06:18 GMT</pubDate>
      <guid>https://communities.vmware.com/t5/VMware-Aria-Operations-for-Logs/Horizon-VM-to-Zero-Client-Link/m-p/1416638#M1190</guid>
      <dc:creator>admin</dc:creator>
      <dc:date>2017-05-10T18:06:18Z</dc:date>
    </item>
  </channel>
</rss>

