Event Details
User Activity->Object Access->VMware->vm.Snapshot.remove
vm.Snapshot.remove
 Sample:

                                
Log Type: VMware Infrastructure Events
 Uniquely Identified By:
Log Name: VMware vCenter and ESX(i) events
Filtering Field Equals to Value
EventId 2
InsertionString5 vm.Snapshot.remove
Field Matching
FieldDescriptionStored inSample Value
When At what date and time a user activity originated in the system. TimeStart 10.10.2000 19:00:00
Who Account or user name under which the activity occured. UserName Alebovsky
What The type of activity occurred (e.g. Logon, Password Changed, etc.) DescriptionId Folder.destroy
Where The name of the workstation/server where the activity was logged. Host 10.30.35.77
Where From The name of the workstation/server where the activity was initiated from. - 10.10.10.10
Severity Specify the seriousness of the event. - High
WhoDomain -
WhereDomain -
Result Successful or Failed Result
Object Name EntityName host
Object Type -
Whom -
Comments
You must be logged in to comment