Need event logs - Can't go back before midnight

[dborgill]

We have VMView 3.1.3 and we are trying to see if a user was logged into a VM at a certain time last week. By default, the event log only goes back to midnight of the current day.

Is there anyway to extend the time of the event log or another way besides the actual Windows event logs to monitor user usage and logins/logoffs?

Thanks in advance

[Andr3y · Accepted solution]

I don't have View 3 server handy, but pretty sure same applies for both 3 and 4.

if user connected via View server you should be able to see this event recorded in your View connection server logs.

The default log level records all simple events including logon and logoff, you can enable more advanced logging so it will display each logon in details, but they can grow pretty quickly.

Default log location: C:\Documents and Settings\All Users\Application Data\VMware\VDM\logs

also these KBs might be handy: kb.vmware.com/kb/1017939, kb.vmware.com/kb/1007905

Cheers,

Andr3y