VMWARE.LOG Throttled

[jbsengineer]

We are starting to notice because of the daily snapshots that our VM's have started to throttle there vmware.log file. When that happens nothing is logged, once it marks as throttled all logging is stopped. It is a built in security mechanism so you will not fill the datastore if a VM is compromised. What is everyone doing to work around this?

[ThomasMc]

Can't say that I see issues like this but I work on a small environment, what sort of log rotation are you using?

[jbsengineer]

The default and I'm not sure what the default is (part of the problem). I'm having a bit trouble aggregating information about what triggers the throttle, how to manupulate the settings, etc. Not much information out there.

[ThomasMc]

There is plenty of info over here

http://www.isaca.org/Groups/Professiona ... 202011.pdf

[ThomasMc]

There is plenty of info over here

http://www.isaca.org/Groups/Professiona ... 202011.pdf

The throttle is there to protect from malicious log growth so don't think you want to tamper with its setting(if you even can do that) just sort your rotation out and you should be ok