Comments on: Events, Dear Boy, Events – Part 2

By: Marcus

Marcus — Thu, 24 Sep 2015 14:16:11 +0000

Six years old, but still an incredibly helpful post. Thank you for this.

By: LucD

LucD — Wed, 02 Jun 2010 08:37:07 +0000

In reply to Skywalker. Sure, expect a new post on ExtendedEvent filtering, but don't hold your breath since I'm quite busy with the book and all ;-)

By: Skywalker

Skywalker — Wed, 02 Jun 2010 08:29:45 +0000

Hi Luc,
Could you provide an example on how to use the Description to filter out ExtendedEvent objects? Many thanks.

By: LucD

LucD — Fri, 18 Dec 2009 18:34:02 +0000

In reply to sham. Hi Sham, Have a look at Events – Part 3 : Auditing VM device changes. I think this does what you were looking for. Luc.

By: sham

sham — Thu, 17 Dec 2009 14:26:35 +0000

Thanks – ive also logged a case with out TAM so hopefully they may come back with something too (other than to go buy the new config control product that is 🙂

By: LucD

LucD — Wed, 16 Dec 2009 16:30:48 +0000

In reply to sham. Hi Sham, That's indeed a good idea but I'm not sure if this can be extracted from the events. I'll have a look and do some testing. Luc.

By: sham

sham — Wed, 16 Dec 2009 16:02:09 +0000

Hi Luc,

Slightly off topic but hopefully you can help…

Im trying to report on changes to Vms in real time by creating an event based alarm using the VMReconfigured event. This seems to work well and reports back when the change occurs but it seems it gives me everything I need except the ACTUAL change that was made.

E.g. Adding a NIC on a VM returns back a generic “VM Reconfigured” event and I can get the user that made the change, the object that was affected etc but not the fact that the NIC was added.

By: LucD

LucD — Thu, 03 Dec 2009 20:08:51 +0000

In reply to Paul. Hi Paul, No, unfortunately I don't know how to differentiate between vMotion and svMotion. In vSphere I see fullformattedmessage in VmBeingRelocatedEvent with this layout: Relocating vmname in datacentername from esxname1 to esxname2 where esxname1 is the same as esxname2 in case of an svMotion. But that's all. There is even, afaik, no indication of the datastores involved in case of a svMotion. Luc.

By: Paul

Paul — Thu, 03 Dec 2009 11:53:50 +0000

Hi Luc,

Do you know of anyway to differentiate between a vmotion and svmotion? Looking at the api reference there doens’t seem to be an event for each, just migration events. The only way I can see is for a svmotion the fullformattedmessage is

migrating vm from … to…

where as with vmotion it says

migrating VM of host…