Document toolboxDocument toolbox

vdi.vmware

Introduction

Tags beginning with vdi.vmware identify events generated by VMWare Horizon View.

Valid tags and data tables

The full tag must have 4 levels. The first two are fixed as vdi.vmware. The third and fourth levels identify the type of events sent.

Technology

Brand

Type

Subtype

Technology

Brand

Type

Subtype

vdi

vmware

horizon

  • agent

  • console

  • connection_server

These are the valid tags and corresponding data tables that will receive the parsers' data:

Tag

Data table

Tag

Data table

vdi.vmware.horizon.agent

vdi.vmware.horizon

vdi.vmware.horizon.console

vdi.vmware.horizon

vdi.vmware.horizon.connection_server

vdi.vmware.horizon

How is the data sent to Devo?

Define the following relay rules for each tag:

vdi.vmware.horizon.agent

Source port

Customer source port, for example 13021

Source data

EventType=\"AGENT_

Target tag

vdi.vmware.horizon.agent

Sent without syslog tag

✓

Stop processing

✓

 

vdi.vmware.horizon.console

Source port

Customer source port, for example 13021

Source data

EventType=\"ADMIN_

Target tag

vdi.vmware.horizon.console

Sent without syslog tag

✓

Stop processing

✓

 

vdi.vmware.horizon.connection_server

Source port

Customer source port, for example 13021

Source data

EventType=\"BROKER_

Target tag

vdi.vmware.horizon.connection_server

Sent without syslog tag

✓

Stop processing

✓

 

Table structure

This is the set displayed by this table.

Field

Type

Extra fields

Field

Type

Extra fields

eventdate

timestamp

 

acknowledged

int4

 

application_id

str

 

desktop_id

str

 

endpoint_id

str

 

event_id

int4

 

event_type

str

 

folder_path

str

 

group_id

str

 

lun_id

str

 

machine_id

str

 

module

str

 

node

str

 

session_id

str

 

severity

str

 

source

str

 

thinapp_id

str

 

time

str

 

user_disk_path_id

str

 

user_sid

str

 

module_and_event_text

str

 

rawMessage

str

✓

hostchain

str

✓

tag

str

✓

Â