VMware Networking Community
vmmed1
Enthusiast
Enthusiast
Jump to solution

Where can you view a history of NSX Ticket Logger?

If you enable ticket history before a change and disable it after the change - where can you view

this?

pastedImage_0.png

Tags (2)
1 Solution

Accepted Solutions
cnrz
Expert
Expert
Jump to solution

NSX Manager log files (vsm.log on NSX Manager in /home/secureall/secureall/logs folder) would include  Ticket Id in the change audit log

Networking and Security>NSX Managers>Monitor>Audit Logs   tab will include Operation Column would include the Ticket Id entered when enabling

These links could be helpful:

https://richdowling.wordpress.com/2014/12/03/objective-8-4-perform-auditing-and-compliance/

Audit infrastructure changes

The NSX Ticket Logger allows you to track the infrastructure changes that you make. All operations are tagged with the specified ticket ID, and audit logs for these operations include the ticket ID. Log files for these operations are tagged with the same ticked ID.

  • Log in to the vSphere Web Client.
  • Click Networking & Security and then click the Manage tab.
  • Click Edit next to NSX Ticket Logger Settings.
  • Type a ticket ID and click Turn On.
  • The NSX Ticket Logging pane is displayed at the right side of the vSphere Web Client window. Audit logs for the operations that you perform in the current UI session include the ticket ID in the Operation Tags column.
    8-4-ticket-logger.png
    If multiple vCenter Servers are being managed by the vSphere Web Client, the ticket ID is used for logging on all applicable NSX Managers.
    Ticket logging is session based. If ticket logging is on and you log out or if the session is lost, ticket logging will be turned off by default when you re-login to the UI. When you complete the operations for a ticket, you turn logging off by repeating steps 2 and 3 and clicking Turn Off.

http://buildvirtual.net/vcp-nv-administer-logging-on-vmware-nsx/

View the Audit Log

View solution in original post

1 Reply
cnrz
Expert
Expert
Jump to solution

NSX Manager log files (vsm.log on NSX Manager in /home/secureall/secureall/logs folder) would include  Ticket Id in the change audit log

Networking and Security>NSX Managers>Monitor>Audit Logs   tab will include Operation Column would include the Ticket Id entered when enabling

These links could be helpful:

https://richdowling.wordpress.com/2014/12/03/objective-8-4-perform-auditing-and-compliance/

Audit infrastructure changes

The NSX Ticket Logger allows you to track the infrastructure changes that you make. All operations are tagged with the specified ticket ID, and audit logs for these operations include the ticket ID. Log files for these operations are tagged with the same ticked ID.

  • Log in to the vSphere Web Client.
  • Click Networking & Security and then click the Manage tab.
  • Click Edit next to NSX Ticket Logger Settings.
  • Type a ticket ID and click Turn On.
  • The NSX Ticket Logging pane is displayed at the right side of the vSphere Web Client window. Audit logs for the operations that you perform in the current UI session include the ticket ID in the Operation Tags column.
    8-4-ticket-logger.png
    If multiple vCenter Servers are being managed by the vSphere Web Client, the ticket ID is used for logging on all applicable NSX Managers.
    Ticket logging is session based. If ticket logging is on and you log out or if the session is lost, ticket logging will be turned off by default when you re-login to the UI. When you complete the operations for a ticket, you turn logging off by repeating steps 2 and 3 and clicking Turn Off.

http://buildvirtual.net/vcp-nv-administer-logging-on-vmware-nsx/

View the Audit Log