Event Details
User Activity->Object Access->VMware->VM Removed
VM Removed
 Sample:
Removed New Virtual Machine 1 on 10.30.33.183 from Test DataCenter

	CreatedTime :	08.10.2010  13:03:38
	UserName :		Administrator
	Host :		10.30.38.127
	EventID :		1
	Key :		948	
	ChainId :		947
	Event Type :		VmRemovedEvent
	Datacenter Name :	Test DataCenter
	Host in datacenter :	10.30.33.183
	ComputeResource :	10.30.33.183
	Virtual Machine Name :	New Virtual Machine 1
	HostType :		VMware vCenter Server
Log Type: VMware Infrastructure Events
 Uniquely Identified By:
Log Name: VMware vCenter and ESX(i) events
Filtering Field Equals to Value
EventId 1
InsertionString4 VmRemovedEvent
Field Matching
FieldDescriptionStored inSample Value
When At what date and time a user activity originated in the system. CreatedTime 10.10.2000 19:00:00
Who Account or user name under which the activity occured. UserName Alebovsky
What The type of activity occurred (e.g. Logon, Password Changed, etc.) "Vm removed" Vm removed
Where The name of the workstation/server where the activity was logged. Host in datacenter 10.30.33.183
Where From The name of the workstation/server where the activity was initiated from. - 10.10.10.10
Severity Specify the seriousness of the event. - High
WhoDomain -
WhereDomain -
Result Successful or Failed -
Object Name Virtual Machine Name test Win2008
Object Type -
Whom -
Comments
You must be logged in to comment