VMware Event Log
VMware Event Log returns an aggregate view of vCenter managed logging. You can determine which categories of event messages to collect when you enable WhatsVirtual event listeners for each vCenter server device.
Each log message record contains the following data columns:
- . Date and time for the event message. (Relative to the time configured for the hypervisor.)
- . Name or IP Address of the device where the event occurred.
- . Name of the data center if event is specific to a data center.
- . Name of the host if event is specific to a host.
- . Name of the virtual machine if event is specific to a virtual machine.
- . VMWare user name associated with the event (applicable when event is the result of user action).
- . Group in which the specific event is categorized.
- . Any additional detail gathered from the device applicable to the specific event.
Fetch and filter log data
. 
Choose one or more host devices.
Use the Select Device dialog for one of the following:
Control
|
Purpose
|
Device 
|
Browse and choose a single device.
|
Device Group 
|
Choose an existing group of one or more devices. You can also create custom or dynamic groups.
|
: You can organize devices into custom or dynamic groups. For more information, see Grouping Devices.
Choose specific windows for log data, or choose 
for the latest.
Choose time constraints for data view
Control
|
Purpose
|
Date Range
|
Choose or define an overall date range.
|
Business hours
|
- Focus on specific days of the week and periods within each day.
- Reveal trends that are sensitive to business hours, time zones, and other periodic attributes in the observed data.
|
. 
Select rows based on specific column values, remove columns, and remove noise and chaff from the table.
Filter tables rows and hide and select columns
Click a column heading 
and use the following from the drop down list:
Control
|
Purpose
|
Sort. 
|
Sort column in ascending or descending order.
|
Columns. 
|
Pick the columns you want to view. Click a check box to display the column. Clear the check box to hide it.
|
Group by this field.
|
Group table into collapsible rows wherever the current column contains identical data ("field") values.
|
Filters. 
|
Provide a keyword and use wildcards to view only rows that contain the keyword for the selected column or view.
Most column and log view filters provide the following wildcard matching:
- Match either zero characters or any one character ('?').
Example: 198.51.100.2? (Matches tokens with IP address ending with 2, or 20-29.) - Match either zero, any one, or many characters ('*').
Example: Stop* (Matches log strings containing Stop, Stopped, Stopping, and so on.)
|
: VMware Event Log only returns log messages for hosts that have the appropriate WhatsVirtual listeners and event collection enabled. For more details, see Enable WhatsVirtual Event Listeners.
: Date-time stamp for VMware Event Log log messages are relative to time settings configured for the vCenter/hypervisor.
Email, export, and save as PDF
VMware Event Log event data can be exported, reused, and distributed. Select export (
) to access the following options:
VMware Event Log
Choose device.