Event Details
User Activity->Object Access->VMware->VM Suspended
VM Suspended
 Sample: 
ForSample on 10.30.35.77 in Test DataCenter is suspended

	CreatedTime :	10.11.2010  13:03:20
	UserName :		Administrator
	Host :		10.30.38.127
	EventID :		1
	Key :		12990	
	ChainId :		12987
	Event Type :		VmSuspendedEvent
	Datacenter Name :	Test DataCenter
	Host in datacenter :	10.30.35.77
	ComputeResource :	10.30.35.77
	Virtual Machine Name :	ForSample
	HostType :		VMware vCenter Server
Log Type: VMware Infrastructure Events
 Uniquely Identified By:
Log Name: VMware vCenter and ESX(i) events
Filtering Field Equals to Value
EventId 1
InsertionString4 VmSuspendedEvent
Field Matching
FieldDescriptionStored inSample Value
When At what date and time a user activity originated in the system. CreatedTime 10.10.2000 19:00:00
Who Account or user name under which the activity occured. UserName Alebovsky
What The type of activity occurred (e.g. Logon, Password Changed, etc.) "VM suspended" VM suspended
Where The name of the workstation/server where the activity was logged. Host in datacenter 10.30.33.183
Where From The name of the workstation/server where the activity was initiated from. - 10.10.10.10
Severity Specify the seriousness of the event. - High
WhoDomain -
WhereDomain -
Result Successful or Failed -
Object Name Virtual Machine Name test Win2008
Object Type -
Whom -
Comments
You must be logged in to comment