mike-p's Posts

It‘s a 2+2 node cluster. The baseline system worked fine until now. There was no reason to change to image based updates. Especially because the powershell cmd‘s (get-compliance) are more developed than for image based updates. There are more details to request.

It seems a problem with the powershell command. If you use 'esxcli hardware pci list' at the host the output is correct: 0000:1b:00.0 Address: 0000:1b:00.0 Segment: 0x0000 Bus: 0x1b Slot: 0x00 Function: 0x0 Vendor Name: VMware Inc. Device Name: vmxnet3 Virtual Ethernet Controller Configured Owner: VMkernel Current Owner: VMkernel Vendor ID: 0x15ad Device ID: 0x07b0 SubVendor ID: 0x15ad SubDevice ID: 0x07b0 Device Class: 0x0200 In the csv the fields are empty : "R750 vSAN Ready Node","vmnic0","4.1.13.0-4vmw.802.0.0.22380479","bc 1.39 ncsi 1.5.42.0","Broadcom Corporation NetXtreme BCM5720 Gigabit Ethernet","0","0","0","0"  

I deleted some files manually but I had to escalade to root privilege. Than I updated to 8.6.0.21134460 and now I hope that the log rotation will work properly.  ]# df -h Filesystem Size Used Avail Use% Mounted on devtmpfs 3.9G 0 3.9G 0% /dev tmpfs 3.9G 28K 3.9G 1% /dev/shm tmpfs 3.9G 748K 3.9G 1% /run tmpfs 3.9G 0 3.9G 0% /sys/fs/cgroup /dev/sda4 14G 2.6G 11G 21% / tmpfs 3.9G 172K 3.9G 1% /tmp /dev/sda2 238M 25M 201M 11% /boot /dev/mapper/support_vg-logs 975M 571M 354M 62% /opt/vmware/logs /dev/mapper/support_vg-heapdump 3.9G 96K 3.7G 1% /opt/vmware/heapdump /dev/mapper/support_vg-vrmsdb 9.8G 68M 9.2G 1% /var/lib/vrmsdb /dev/mapper/support_vg-support 2.0G 320M 1.5G 18% /opt/vmware/support tmpfs 798M 0 798M 0% /run/user/666   Regards Mike

I got a feedback from engineering ; This will be fixed in the next 13.1 Release of Powercli. By the meantime you can use this workaround: get-vmhost | get-compliance | select Entity, @{N="Baseline"; E={$_.Baseline.Name}}, Status | ft -AutoSize

Hi, i tested it. the objects of both DAG VMs are distributed over the nodes. If I put one node in maintenance mode with the NA option I loose objects of the active vm too.  This is a bit weird because this 2 nodes are in different fault domains. I expected that the data will be placed inside one FD. I think I found the reason for this. Originally this was a 2 node stretched cluster and the Raid0 policy was Set to None-stretched Cluster. I changed this now to Site mirroring - stretched cluster: "Defines whether to use standard, stretched or 2 node cluster. In case of stretched clusters whether data is mirrored at both sites (Site mirroring) or whether it's constrained within only one of the sites in the cluster. In case of 2 node cluster the data is mirrored at both hosts." I will wait until the object resync will be executed and check the MM with NA again.        

Thanks, yes in general this works, where can I find the other properties like number of missing patches? I tried the next step to run the script on a cluster and changed the entity to $cluster but got partially error: $cluster = Get-Cluster -Name vsan-cluster PS D:\VMware-HC\code> .\patch-compl-new.ps1 Get-Compliance : 07.10.2022 19:57:13 Get-Compliance fault.SecurityError.summary In D:\VMware-HC\code\patch-compl-new.ps1:1 Zeichen:1 + Get-Compliance -Entity vsan-cluster -Baseline $Baseline | + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [Get-Compliance], VimException + FullyQualifiedErrorId : Core_BaseCmdlet_UnknownError,VMware.VumAutomation.Commands.GetCompliance Get-Compliance : 07.10.2022 19:57:13 Get-Compliance fault.SecurityError.summary In D:\VMware-HC\code\patch-compl-new.ps1:1 Zeichen:1 + Get-Compliance -Entity vsan-cluster -Baseline $Baseline | + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [Get-Compliance], VimException + FullyQualifiedErrorId : Core_BaseCmdlet_UnknownError,VMware.VumAutomation.Commands.GetCompliance Get-Compliance : 07.10.2022 19:57:13 Get-Compliance fault.SecurityError.summary In D:\VMware-HC\code\patch-compl-new.ps1:1 Zeichen:1 + Get-Compliance -Entity vsan-cluster -Baseline $Baseline | + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [Get-Compliance], VimException + FullyQualifiedErrorId : Core_BaseCmdlet_UnknownError,VMware.VumAutomation.Commands.GetCompliance VMHost Status Baseline NumberofPatches ------ ------ -------- --------------- host06.sp.local Compliant Host Security Patches (Predefined) 138 host06.sp.local NotCompliant Critical Host Patches (Predefined) 196 host03.sp.local Compliant Host Security Patches (Predefined) 138 host03.sp.local NotCompliant Critical Host Patches (Predefined) 196 host04.sp.local Compliant Host Security Patches (Predefined) 138 host04.sp.local NotCompliant Critical Host Patches (Predefined) 196 host05.sp.local Compliant Host Security Patches (Predefined) 138 host05.sp.local NotCompliant Critical Host Patches (Predefined) 196 host02.sp.local Compliant Host Security Patches (Predefined) 138 host02.sp.local NotCompliant Critical Host Patches (Predefined) 196 host01.sp.local Compliant Host Security Patches (Predefined) 138 host01.sp.local NotCompliant Critical Host Patches (Predefined) 196

There is another problem (AFAIK get-baseline targets entities not hostnames) get-compliance : 07.10.2022 19:02:43 Get-Compliance Could not find InventoryItem with name 'hostname'. At C:\code\patch-compl-new.ps1:1 char:1 + get-compliance -Entity hostname -baseline $Baseline |

Hi Luc, this output is much better. The correct name is displayed: Name Description Id Type TargetType LastUpdateTime NumberOfPatches ---- ----------- -- ---- ---------- -------------- --------------- Host Security Patches (Predefined) A predefined baseline for all security patches for hosts 1 Patch Host 07.10.2022 14:13:21 138 Critical Host Patches (Predefined) A predefined baseline for all critical patches for Hosts 2 Patch Host 07.10.2022 14:13:21 196 but now the compliance state is missing. I run my command on another system with little bit older ESXi versions and get this output  get-vmhost | Get-Compliance -Detailed | ft -autosize Entity                 Baseline           Status            CompliantPatches NotCompliantPatches ------             --------               ------            ---------------- ------------------ esxi-05.mpa.lab    Host Security Patches  Compliant          5                 0 esxi-05.mpa.lab    Critical Host Patches  NotCompliant       51                3 esxi-05.mpa.lab    Non-Critical Host Pa.  NotCompliant       20                32   That is the info i intend to get.