Document toolboxDocument toolbox

vdi.vmware

Introduction

Tags beginning with vdi.vmware identify events generated by VMWare Horizon View.

Valid tags and data tables

The full tag must have 4 levels. The first two are fixed as vdi.vmware. The third and fourth levels identify the type of events sent.

These are the valid tags and corresponding data tables that will receive the parsers' data:

Product / Service

Tags

Data tables

Product / Service

Tags

Data tables

VMware Horizon

vdi.vmware.horizon

vdi.vmware.horizon

vdi.vmware.horizon.agent

vdi.vmware.horizon.agent

vdi.vmware.horizon.console

vdi.vmware.horizon.console

vdi.vmware.horizon.connection_server

vdi.vmware.horizon.connection_server

For more information, read more About Devo tags.

How is the data sent to Devo?

Define the following relay rules for each tag:

vdi.vmware.horizon.agent

Source port

Customer source port, for example 13021

Source data

EventType=\"AGENT_

Target tag

vdi.vmware.horizon.agent

Sent without syslog tag

✓

Stop processing

✓

vdi.vmware.horizon.console

Source port

Customer source port, for example 13021

Source data

EventType=\"AGENT_

Target tag

vdi.vmware.horizon.agent

Sent without syslog tag

✓

Stop processing

✓

vdi.vmware.horizon.connection_server

Source port

Customer source port, for example 13021

Source data

EventType=\"BROKER_

Target tag

vdi.vmware.horizon.connection_server

Sent without syslog tag

✓

Stop processing

✓

Table structure

These are the fields displayed in these tables:

vdi.vmware.horizon

Field

Type

Extra fields

Field

Type

Extra fields

eventdate

timestamp

 

acknowledged

int4

 

application_id

str

 

desktop_id

str

 

endpoint_id

str

 

event_id

int4

 

event_type

str

 

folder_path

str

 

group_id

str

 

lun_id

str

 

machine_id

str

 

module

str

 

node

str

 

session_id

str

 

severity

str

 

source

str

 

thinapp_id

str

 

time

str

 

user_disk_path_id

str

 

user_sid

str

 

module_and_event_text

str

 

hostchain

str

 ✓

tag

str

 ✓

rawMessage

str

 ✓

vdi.vmware.horizon.agent

Field

Type

Extra fields

Field

Type

Extra fields

eventdate

timestamp

 

acknowledged

int4

 

application_id

str

 

desktop_id

str

 

endpoint_id

str

 

event_id

int4

 

event_type

str

 

folder_path

str

 

group_id

str

 

lun_id

str

 

machine_id

str

 

module

str

 

node

str

 

session_id

str

 

severity

str

 

source

str

 

thinapp_id

str

 

time

str

 

user_disk_path_id

str

 

user_sid

str

 

current_session_length

str

 

user_display_name

str

 

machine_name

str

 

total_login_length

str

 

session_type

str

 

desktop_display_name

str

 

pool_id

str

 

machine_dns_name

str

 

module_and_event_text

str

 

hostchain

str

 ✓

tag

str

 ✓

rawMessage

str

 ✓

vdi.vmware.horizon.console

Field

Type

Extra fields

Field

Type

Extra fields

eventdate

timestamp

 

acknowledged

int4

 

application_id

str

 

desktop_id

str

 

endpoint_id

str

 

event_id

int4

 

event_type

str

 

folder_path

str

 

group_id

str

 

lun_id

str

 

machine_id

str

 

module

str

 

node

str

 

session_id

str

 

severity

str

 

source

str

 

thinapp_id

str

 

time

str

 

user_disk_path_id

str

 

user_sid

str

 

entitlement_display

str

 

user_display_name

str

 

machine_name

str

 

admin_permission_entity

str

 

broker_id

str

 

attribute_change_type

str

 

attribute_name

str

 

attribute_value

str

 

username

str

 

maintenance_mode

str

 

enable_status

str

 

admin_folder_name

str

 

object_id

str

 

object_type

str

 

admin_role_name

str

 

admin_role_new_name

str

 

security_server_id

str

 

session_message

str

 

svi_parent_vm

str

 

svi_snapshot

str

 

svi_deployment_group_id

str

 

svi_admin_id

str

 

svi_admin_name

str

 

svi_admin_fqdn

str

 

svi_vmid

str

 

user_disk_name

str

 

vc_address

str

 

module_and_event_text

str

 

hostchain

str

 ✓

tag

str

 ✓

rawMessage

str

 ✓

vdi.vmware.horizon.connection_server

Field

Type

Extra fields

Field

Type

Extra fields

eventdate

timestamp

 

acknowledged

int4

 

application_id

str

 

desktop_id

str

 

endpoint_id

str

 

event_id

int4

 

event_type

str

 

folder_path

str

 

group_id

str

 

lun_id

str

 

machine_id

str

 

module

str

 

node

str

 

session_id

str

 

severity

str

 

source

str

 

thinapp_id

str

 

time

str

 

user_disk_path_id

str

 

user_sid

str

 

user_display_name

str

 

desktop_display_name

str

 

machine_name

str

 

machine_dns_name

str

 

pool_id

str

 

application_missing_count

str

 

application_executable

str

 

protocol_id

str

 

user_count

str

 

broker_id

str

 

broker_name

str

 

svi_path

str

 

svivmid

str

 

vc_address

str

 

session_type

str

 

module_and_event_text

str

 

hostchain

str

 ✓

tag

str

 ✓

rawMessage

str

 ✓