Monitoring and reporting for Veeam Backup & Replication, VMware vSphere and Microsoft Hyper-V
Post Reply
lando_uk
Expert
Posts: 311
Liked: 26 times
Joined: Oct 17, 2013 10:02 am
Full Name: Mark
Location: UK
Contact:

Audit logging, history etc

Post by lando_uk » Sep 26, 2018 10:15 am

Hi

I've been tasked to make our audit logging better.

The Bad vCenter username logon attempt alarm is good, but how do I get a list of all bad attempts in the last 6 months? (edit, ok I found the report)

Also, trawling through vcenter logs is a pain, can I create custom alarm (informational) for normal user logons? (maybe excluding known service logons like Veeam)

I believe this kind of audit logging could be a new feature for One in the future. Imagine having access to an easy to read, audit of actions that a certain user did on a certain day. "show me what Jim did that screwed up cluster x on Friday?" Maybe it wouldn't hold all that info in its VONE database, you could run a query on demand against the vcenter DB.

Cheers

Shestakov
Veeam Software
Posts: 6974
Liked: 715 times
Joined: May 21, 2014 11:03 am
Full Name: Nikita Shestakov
Location: Prague
Contact:

Re: Audit logging, history etc

Post by Shestakov » Sep 26, 2018 12:05 pm 1 person likes this post

Hi Mark,
you can create alarm on any vSphere event as Veeam ONE collects them all. You can either find an event under Tasks&Events tab right-click on it and create the alarm or find the event name and create an alarm from the scratch.
Thanks!

Vitaliy S.
Product Manager
Posts: 23016
Liked: 1561 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Audit logging, history etc

Post by Vitaliy S. » Sep 26, 2018 12:10 pm 1 person likes this post

lando_uk wrote:"show me what Jim did that screwed up cluster x on Friday?"
You can use this report to track down what Jim did last summer :) > Infrastructure Changes Audit

lando_uk
Expert
Posts: 311
Liked: 26 times
Joined: Oct 17, 2013 10:02 am
Full Name: Mark
Location: UK
Contact:

Re: Audit logging, history etc

Post by lando_uk » Sep 26, 2018 12:11 pm

Its been years since i setup VONE, where do I set the log retention times? Im getting 6 months worth of charts, but i'm not sure i'm seeing that retention on alarms.

Shestakov
Veeam Software
Posts: 6974
Liked: 715 times
Joined: May 21, 2014 11:03 am
Full Name: Nikita Shestakov
Location: Prague
Contact:

Re: Audit logging, history etc

Post by Shestakov » Sep 26, 2018 1:48 pm

You can set retention for which performance data and events must be stored in the Veeam ONE database. Alarms trigger on fly once event happens.

lando_uk
Expert
Posts: 311
Liked: 26 times
Joined: Oct 17, 2013 10:02 am
Full Name: Mark
Location: UK
Contact:

Re: Audit logging, history etc

Post by lando_uk » Sep 26, 2018 1:51 pm 1 person likes this post

Vitaliy S. wrote:
Sep 26, 2018 12:10 pm
You can use this report to track down what Jim did last summer :) > Infrastructure Changes Audit
Perfect, I just ran this report, they will be happy with this.

I'm going to run this every time i come back from holiday in future, see what mischief people have been getting up to!

Post Reply

Who is online

Users browsing this forum: No registered users and 3 guests