SCharchouf Tracker

Re: unauthorized kernel modules loaded in memory

SCharchouf — Fri, 20 Nov 2020 13:33:00 GMT

Thank LucD it's OK

by the way do you know what mean if the Module is unsigned despite that the image used is the one from HPE: a Customized Image?

unauthorized kernel modules loaded in memory

SCharchouf — Fri, 20 Nov 2020 09:48:25 GMT

I'm trying to get unauthorized kernel modules loaded in memory, I'm using the script below, unfortunately it's not working

Foreach ($VMHost in Get-VMHost ) {

$ESXCli = Get-EsxCli -VMHost $VMHost -V2
$ESXCli.system.module.list.invoke() | ForEach-Object {
$ESXCli.system.module.get.invoke($_.Name) | Select-Object @{N="VMHost";E={$VMHost}}, Module, License, Modulefile, Version, SignedStatus, SignatureDigest, SignatureFingerPrint } }

Re: Check vCenter Connectivity

SCharchouf — Thu, 19 Nov 2020 12:31:22 GMT

I have nothing in $global:DefaultVIServers

Disconnect-VIServer -Server * -Confirm:$false at the start of the script.

I thought about doing it but it would be smarter to do it via the loop unless it is not possible

Check vCenter Connectivity

SCharchouf — Thu, 19 Nov 2020 11:56:03 GMT

I'm trying to connect to some vCenters via PowerCLi and I would like to be sure that there's no session already logged.

I'm using this script but it show me always the last vcenter connected twice

$vCenterList = Get-Content ".\vCenterList.txt"

###Check if we are connected to vCenter Server(s)
foreach ($vCenter in $vCenterList){
if($global:DefaultVIServers.Count -gt 0){
# Return current connection
$global:DefaultVIServers[0]
}
else
{
# Finally, connect to the VMware vCenter
Connect-VIServer -Server $vCenterList
}
}

would you please assist me to correct the script in order to show to which vcenter(s) I'm already connected if not connected then it proceed with connectivity

Re: Get-VMHostFirewallException

SCharchouf — Mon, 16 Nov 2020 17:37:47 GMT

it's possible to add the information related to IP?
I mean if it's set to All IP?
maybe it's me who is poorly expressed on the subject but here is the idea. in fact when you access "System", "Firewall" we find this information:
Service Name
TCP ports
UDP ports
Allowed IP addresses

Re: Get-VMHostFirewallException

SCharchouf — Mon, 16 Nov 2020 17:19:27 GMT

that's what I was going to say, plus I'm trying to get the output per vcenter.

I'm trying to do my best, so far I think my level has improved a lot

Re: Get-VMHostFirewallException

SCharchouf — Mon, 16 Nov 2020 17:11:23 GMT

I thought we should do the same for all esxi in each vCenter.

Re: Extract All vSS & VDS details for all vCenters

SCharchouf — Mon, 16 Nov 2020 17:07:06 GMT

I added
$results = @() at the begin of the script
$results | export-csv -Path .\Output.csv -NoTypeInformation at the end
the file is created but is empty,
i think i'm wrong

Get-VMHostFirewallException

SCharchouf — Mon, 16 Nov 2020 16:43:48 GMT

I'm not sure if I'm on the correct way or no, so I'm asking for some guidance

I'm trying to get all enabled services in all ESXi / vCenter in order to check if the service is set to "AllIP" or to specific IP

#Connect to vCenter Server

Connect-VIServer = "vCenter1","vCenter2","vCenter3","vCenter4"

$VMHosts= Get-VMHost | Get-VMHostFirewallException | Where-Object {$_.Enabled -and ($_.ExtensionData.AllowedHosts.AllIP)}
$Results= @()

foreach ($VMHost in $VMHosts) {

}

Re: Extract All vSS & VDS details for all vCenters

SCharchouf — Sun, 15 Nov 2020 18:07:59 GMT

yep I confirm that the code might be complex

What do you mean by 'Version' in case of a VSS? my bad as the version is related to vDS,
What do you mean by 'Unused Adapters'? unfortunately the current configuration has some unused Uplink

Do you intend to list all pNIC that are not used in the Switch or Portgroup? it should be the case

I have the 2 below scripts, but not able to mix them in order to collect what I need

Get-VMHostNetworkAdapter -vmkernel |
% { $vnet=$_ ; get-vdportgroup -vmhostnetworkadapter $vnet |
%{"$($vnet.vmhost.parent)`t$($vnet.vmhost)`t
$($vnet.name)`t$($vnet.ip)`t$($vnet.subnetmask)`t
$($_.name)`t$($_.vdswitch)`t$($_.vlanconfiguration)" |
out-file .\temp\output.txt -append } }

Get-VirtualPortgroup -standard |
% { $pg=$_ ; get-vmhostnetworkadapter -portgroup $pg |
% { "$($_.vmhost.parent)`t$($_.vmhost)`t$($_.name)`t
$($_.ip)`t$($_.subnetmask)`t$($pg.name)`t
$($pg.virtualswitch.name)`t$($pg.vlanid)" |
out-file .\temp\output.txt -append }}

Any comments or recommendation are always welcome

Extract All vSS & VDS details for all vCenters

SCharchouf — Sun, 15 Nov 2020 16:51:57 GMT

In order to remedy a large network configuration issue, I need to collect vSS & VDS details across all vCenters.

I'm not sure if we can collect both Standard switch and distributed switch in one shot and the output should contain the below information:

HostName
Type : Standard or Distributed
vSwitch MTU
version
Name
Uplink /ConnectedAdapter
PortGroup
VLAN ID
Active adapters
Standby Adapters
Unused Adapters
Security Promiscuous/MacChanges/ForgedTransmits

Re: Get the current NTP and allow it in the Firewall

SCharchouf — Thu, 12 Nov 2020 14:28:58 GMT

I think I misspoke. In fact it is in the firewall rules, vCenter level when we check the authorized IP addresses for NTP client. At this level we find the option "All IP" or authorized IP

Re: Get the current NTP and allow it in the Firewall

SCharchouf — Thu, 12 Nov 2020 14:23:55 GMT

unfortunately is not the case, and NTP already configured and not allowed on the firewall rule

Get the current NTP and allow it in the Firewall

SCharchouf — Thu, 12 Nov 2020 13:53:26 GMT

not all my ESXi has the same NTP, so I'm asking if there's a way to get the current NTP IP from ESXi and allow them in the firewall rule?

Re: Convert LOG file to CSV

SCharchouf — Thu, 12 Nov 2020 13:22:52 GMT

sorry for the delay, Message sent

since the update I no longer receive notifications. I will check the configuration of my profile.

Re: Convert LOG file to CSV

SCharchouf — Wed, 11 Nov 2020 09:51:02 GMT

Totally agree, may I share it in private?

Re: Convert LOG file to CSV

SCharchouf — Wed, 11 Nov 2020 09:25:12 GMT

it would be a greate idea but not sure how to proceed

and I believe this is will require a huge change in the script, right?

Re: Convert LOG file to CSV

SCharchouf — Tue, 10 Nov 2020 22:37:15 GMT

I need the LOG as it's mandatory as a proof of activity

the reason why I'm trying to convert to CSV in order to explore data in Excel

Re: Convert LOG file to CSV

SCharchouf — Tue, 10 Nov 2020 22:07:52 GMT

the output is a LOG of running a PowerCLi commands to check some parameters.

the output is like this

2020-11-10][23:04:23] - Success - PowerCLI module exists

[2020-11-10][23:04:25] - Control - ############# Check VIB Acceptance Level #############
[2020-11-10][23:04:43] - Success -HostLab : Acceptance Level 'PartnerSupported'

[2020-11-10][23:04:46] - Success -Host1 : Acceptance Level 'PartnerSupported'

[2020-11-10][23:04:46] - Control - ############# Check NTP Configuration #############

Convert LOG file to CSV

SCharchouf — Tue, 10 Nov 2020 21:29:55 GMT

I need to convert a LOG file to CSV is that possible?