WilliamLam.com

vCenter Event Broker Appliance Updates - VMworld, Fling, Community & Open Source

by // Leave a Comment

VMworld

At VMworld Barcelona, Michael Gasch and I had the privilege of presenting our #CODE1379E "If This Then That" for vSphere - The Power of Event Driven Automation session. The room was completely packed for a 9am session on Thursday after the big VMworld Party and we just wanted to thank everyone who attended the session and for those that came up to talk to us afterwards. We really had no idea how the session would be received but from the feedback, tweets and DM's we have received and continue to receive, it looks like the session really resonated with customers. In case you missed the session or could not attend VMworld, the session was recorded and is actually available for everyone to view. You just need to sign in with a free VMworld account.

VMworld Recording: "If This Then That" for vSphere

VMware Fling

For those who attended the VMworld session in person, there was a nice surprise at the very end, which I think may be a VMworld first. Michael and I have been working on a side project in our spare time called the vCenter Event Broker Appliance or VEBA for short. This solution enables customers to easily create Event Driven Automation based on vCenter Server Events and rather than just showing off some cool demos, we wanted to leave the audience with something they can actually use right now!

With a little chant that was started by Emad Younis (this was NOT planned), the audience had spoken and wanted us to publish the planned VMware Fling which we were going to release in the coming days since we had just finished the process literally the week of VMworld. I figure its VMworld, this is what customers, partners and colleagues come here for and with a click of a button and crossing my fingers, the vCenter Event Broker Appliance Fling went LIVE.

[Read more...]

Enhanced vCenter Server Audit Event & Logging in vSphere 6.7 Update 2

by // 8 Comments

A couple of years back I had published a detailed analysis on vCenter Server's Authentication (AuthN) and Authorization (AuthZ) from an auditing and logging standpoint. This has been the go to reference for many of our customers and the posts also includes a number of log samples which I have documented in the following Github repository.

In addition to serving as a reference for our customers, it has also helped our Product and Engineering teams understand where we still had some gaps and how we could improve the overall user experience. As hinted in the recently announced vSphere 6.7 Update 2 release, which will be available soon, there are number of new auditing enhancements that have been made to both vCenter Server and the vCenter Single Sign-On (SSO) service that I think customers will really appreciate.

"Real" client IP address in Events

When you look at a login or logout Event in vCenter Server today, you may have noticed the user's client IP Address is actually of the vCenter Server rather than the actual remote client's address and the reason for this is explained here. In vSphere 6.7 Update 2, the real client IP Address is now captured and is included in all successful login/logout and failed logins. This information can now enable administrators to easily identify unauthorized access and be able to quickly track down the systems initiating the connections.

[Read more...]

vSphere Tag Attach/Detach events now in VMware Cloud on AWS

by // 4 Comments

The underlying products (vSphere, vSAN & NSX) that run within VMware Cloud on AWS (VMC) are constantly being improved with new capabilities and enhancements. As a service, VMC is updated more frequently than a traditional on-premise environment and one huge benefit for our customers is that they get to access all the latest and greatest features of the platform!

Yesterday, I came to learn about some improvements that we had made to our vSphere Tagging infrastructure to start publishing vCenter Server Events for when a vSphere Tag is attached or detached from an inventory object such as a Virtual Machine. This has been a frequently requested feature by our customers, especially for auditing purposes and this also enables the ability to perform additional actions through the use of a vCenter Alarm.

UPDATE (10/13/20) - vSphere 7.0 Update 1 now includes vCenter Events for both vSphere Tag Attach/Detach operations. For complete list of out of the box vCenter Server Events, you can refer to this Github repo.

In the vSphere UI for a VMC vCenter Server, you can now see these new tagging events by selecting the vCenter Server inventory object and then go to Monitor->Events and filter by "attached tag" or "detached tag".


[Read more...]