Event Details
User Activity->Object Access->VMware->vm.Snapshot.revert
vm.Snapshot.revert
 Sample:
RevertToSnapshot_Task

	TimeQueued :	05.10.2010  16:41:54
	UserName :		Administrator
	Host :		10.30.38.127
	EventID :		2
	Key :		task-17	
	ChainId :		350
	Event Type :		TaskInfo
	DescriptionId :	vm.Snapshot.revert
	TimeStart :	 	05.10.2010  16:41:54
	TimeComplete :	05.10.2010  16:42:18
	Reason :		Administrator
	EntityName :		test Win2008
	Progress :		0
	Name (action name) :	RevertToSnapshot_Task
	Locked :		
	State :		2
	Cancelled :		FALSE
	Cancelable :		FALSE
	HostType :		VMware vCenter Server
Log Type: VMware Infrastructure Events
 Uniquely Identified By:
Log Name: VMware vCenter and ESX(i) events
Filtering Field Equals to Value
EventId 2
InsertionString5 vm.Snapshot.revert
Field Matching
FieldDescriptionStored inSample Value
When At what date and time a user activity originated in the system. TimeStart 10.10.2000 19:00:00
Who Account or user name under which the activity occured. UserName Alebovsky
What The type of activity occurred (e.g. Logon, Password Changed, etc.) DescriptionId Folder.destroy
Where The name of the workstation/server where the activity was logged. Host 10.30.35.77
Where From The name of the workstation/server where the activity was initiated from. - 10.10.10.10
Severity Specify the seriousness of the event. - High
WhoDomain -
WhereDomain -
Result Successful or Failed Result
Object Name EntityName host
Object Type -
Whom -
Comments
You must be logged in to comment