How to find which user published the NSX Firewall rule

[RS_IT]

Hi ,

I want to know what is the quickest way to find who has published the nsx firewall rule ? can we get this info based on the firewall rule id ?

[naymar27]

Hi,

You can find that in the event log. I'm using NSX-V 6.4.4

[RS_IT]

The information is not there.

[Marcin4]

There are two ways.

1# You need to have configured syslog for NSX-Manager and the logs will be there. For exmaple VMware loginisght or Network Insight

2#

Procedure

1. In the vSphere Web Client, navigate to Networking & Security > System > Events.
2. Ensure that you are in the Monitor tab.
3. If multiple IP addresses are available in the NSX Manager drop-down menu, select an IP address, or keep the default selection.The audit log details are displayed in the Audit Logs tab.
4. When details are available for an audit log, the text in the Operation column for that log is clickable. To view details of an audit log, click the text in the Operation column.
5. In the Audit Log Change Details, select Changed Rows to display only those properties whose values have changed for this audit log operation.

Best Regards

Marcin Gwóźdź