Can anyone explain what this is? Its happening across multiple host.

[Da2brit4]

When I look at a vm tasks and events the following is showing up on all the vm's at some point.

Guest operation Delete File performed.

info

6/18/2014 7:47:42 AM

Con6xF-Fs02

root

Guest operation Delete File performed.

info

6/18/2014 7:47:42 AM

Con6xF-Fs02

root

Guest operation Initiate File Transfer From Guest performed.

info

6/18/2014 7:47:42 AM

Con6xF-Fs02

root

Guest operation List Processes performed.

info

6/18/2014 7:47:42 AM

Con6xF-Fs02

root

Guest operation List Processes performed.

info

6/18/2014 7:47:31 AM

Con6xF-Fs02

root

Guest operation List Processes performed.

info

6/18/2014 7:47:17 AM

Con6xF-Fs02

root

Guest operation Start Program performed.

info

6/18/2014 7:47:09 AM

Con6xF-Fs02

root

Guest operation Create Temporary File performed.

info

6/18/2014 7:47:09 AM

Con6xF-Fs02

root

Guest operation Initiate File Transfer To Guest performed.

info

6/18/2014 7:47:08 AM

Con6xF-Fs02

root

Guest operation Create Temporary File performed.

info

6/18/2014 7:47:08 AM

Con6xF-Fs02

root

Thank you ..

[JPM300]

Looks like a file is being deleted in the host:

VMware vSphere 5.1

Guest OS Operations - Delete File

Are you maybe running vSphere's databackup?

[Da2brit4]

We are not running vsphere's databackup.

What file is being created and deleted? This is something that seems to happen on it on that is using the root user.

[JPM300]

Check your CRON on that system and see if there is any schedule jobs setup.  What kind of OS is this?