Virtual Center Security Logs

[jwalker1330]

Hello,

I have a question about Virtual Center 2.0 that I can't seem to find an answer to. Is there a log on the VC or ESX server that logs console access to VMs? At the moment I have security roles and permissions setup but I've been asked by the "powers that be" to find out if specific users have been accessing the integrated console to a certain VM and so far I haven't had any luck. I've looked at most of the logs on both the VC and ESX and didn't find anything outside of the service accounts.

I'm not sure if this is even an option in VMware or if this kind of logging is possible but I thought you are the guys to ask.

Thank you very much in advance.

Joe Walker

[khughes]

Have you looked at the "Tasks/Event" tab, under events it shows who is logging in when and when they log out

- Kyle

[jwalker1330]

Yes I have but it doesn't show console access. Is there an option or switched for which events or tasks the VC can report on?

[gary1012]

It logs that console access was initiated. The problem is that it doesn't associate the event with a UID. I guess you could piece that together with log on the virtual machine to see who logged in when. See the attached report.

[gary1012]

Actually, I take that back. You can get the UID but not from the exported report. You have to go into VIC or WebAccess events to see the UID.

[jwalker1330]

This does clear things up a bit. I'll just have to clean things up and have to play around with the filtering alittle more I guess. Thank you very much.