tracking down sessions generating excessive sessions

[vadm168]

Hi,

vCenter 6.0 running on Windows Server 2012r2.

I have more than 1000 sessions in vCenter. Many are idle connections. There are 30-40 sessions created every minute. A domain service account has 95% of the sessions but this account is used in many place, as I was told by the engineers. vCenter sessions window does not tell the sources. Is there any way to identify the sources where these connections come from?

thank you.

[daphnissov · Accepted solution]

The events portion of the vCenter UI will show the source IP of these logins.

[vadm168]

Hi daphnissov

You were right! They are shown in the events. Because it scrolls so fast, do you know the location of corresponding log file? I tried to find it in %ALLUSERSPROFILE%\VMWare\vCenterServer\logs\ per KB 2110014. However, the closest I can find is vpxd-profiler-*.log but it does not look exactly the same. I'd like to extract the IPs and other info from the log and go from there.

Thank you!

[daphnissov]

That information is stored in the database.