cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post

DEAR VMAN: How do I have better visibility into VMs that are rebooting?

DEAR VMAN:

alert! I would like a little assistance in configuring an alert for vm guests that reboot. I have one that works well on a shutdown but when I followed that same pattern for reboots I get no results.

Any help would be greatly appreciated.

-- NEEDS VM GUEST REBOOT VISIBILITY

Re: Alert for VM guests that reboot

Alert for reboot of Windows/Linux device

Creation date & boot time for VM through VMAN

DEAR NEEDS VM GUEST REBOOT VISIBILITY:  Virtualization Manager (VMAN) provides 20 out of the box Virtual Machine targeted alert definitions that give you the blueprint to creating your own custom alerts for your environment.

pastedImage_6.png

The original answer to NEEDS VM GUEST REBOOT VISIBILITY's question involved using one of these alert definitions to be targeted against one of our collected attributes: vm.osuptime or vm.bootime or any other attribute of your choosing.

As automation becomes the norm, vMotions and as a result, reboots of VMs occur faster than ever. Folks like NEEDS VM GUEST REBOOT VISIBILITY are going to need faster notifications that VM state changes like being rebooted are occurring and possibly failing. With VMAN 8.4, gaining visibility into this is easier than ever with our VMware Event Monitoring Overview support.

In this example, I've chosen to trigger a reboot of VM : "James Shouldice NCentral" using our Virtualization Manager management actions available right from the Virtual Machine Details page.

pastedImage_9.png

pastedImage_11.png

As the reboot is occurring, I can see these tasks and events being logged on the VMware vSphere Web Client with the VM being reset and also powered on.

pastedImage_17.png

What do we see on the VMAN side? Let's take a look.

Step 1: Click My Dashboards and click into the VMware Events Log Viewer

pastedImage_9.png

Step 2: Check to see if any events have been detected over the last hour by typing 'james' into the search box.

pastedImage_18.png

Step 3: Look at the event details by clicking on the arrow in the event row.

pastedImage_19.png

Take a closer look at the details here, because you can create an alert on any of those fields.

Event Details

James Shouldice Windows on tex-esx-01.lab.na in Texas is powered on

Source Time

3/18/2019 6:03:23 PM

Source

10.196.1.91

Vendor

VMware Inc.

Machine Type

VMware vCenter Server

Log Type

VMware Events

Level

Information

User

LAB.TEX\labuser

EventType

VmPoweredOnEvent

Key

2512979

ChainId

2512971

Step 4: Start configuring your rules by clicking 'Configure Rules' in the upper right hand corner of the page. If you're utilizing Log Analyzer you will have access to more advanced options in this area. In a standalone VMAN installation, you can simply Configure Rules.

pastedImage_34.png

I am going to expand out VMware Events section to handle this VMware event with a specific log processing rule. Click 'Create New Rule' to walk through the wizard.

pastedImage_2.png

pastedImage_3.png

Step 5: Set whether you want this to apply only to one particular vCenter or all the VMware data sources that you are currently monitoring, and narrow down the event you're tracking.

I've chosen to do so based on the Vendor of data source: VMware Inc and EventType: VmPoweredOnEvent

pastedImage_5.png

Step 6: After clicking 'Next,' we'll set up an alert to be fired.

pastedImage_9.png

Step 7: Review your rule and save.

pastedImage_10.png

You are now set up with a real-time alert for your system. As soon as a VM is powered on, you're going to know about it immediately because of the alert that's triggered, as well as the VMware event appearing your VMAN VMware Events widget.

pastedImage_11.png

After triggering another reboot I've noticed this in my All Alerts widget which verifies that my alert is working according to my expectations.

pastedImage_13.png

In addition, when I click into the alert details, VMAN is displaying the event that triggered the alert, as well as giving me quick access to the event details for fast troubleshooting.

pastedImage_15.png

pastedImage_16.png

NEEDS VM GUEST REBOOT VISIBILITY, with VMAN 8.4, you have an enhanced ability to track events of this kind. Take a look to see what other use cases you'd like to track and let me know. I'd be happy to promote the most common alert definitions to be out-of-the-box content for even easier usability.

Release notes can be found: Virtualization Manager 8.4 Release Notes - SolarWinds Worldwide, LLC. Help and Support

Looking to upgrade? VMAN 8.4 is available today in your customer portal. Virtualization Manager 8.4 is Now Generally Available

Comments

@serena can you help with some information on different variables that are available to pass in the alert?

I want to pass EventType, EventID, there is also something called as secondary related label which is nothing but the target on which the event has triggered.. 

@pratikmehta003 I think those fields will also be available in the Orion.events table and so you should be able to follow a similar process to the one I linked in the answer to your other post recently. Kevin's idea in the alert lab should get you pointed in the right direction here as well:

https://thwack.solarwinds.com/t5/Alert-Lab-Discussions/Linking-an-Alert-with-a-NetPerfMon-Event-Log/...

Version history
Revision #:
1 of 1
Last update:
‎10-24-2019 02:34 PM
Updated by: