VMware HCX¶

VMware NSX

About¶

VMware HCX streamlines application migration, workload rebalancing and business continuity across data centers and clouds.

Product Details¶

Vendor URL: VMware NSX - Application Migration and Mobility Platform

Product Type: Application Migration and Mobility Platform

Product Tier: Tier III

Integration Method: Syslog

Parser Details¶

Log Format: Syslog

Expected Normalization Rate: 85%

Data Label: VMWARE_HCX

UDM Fields (list of all UDM fields leveraged in the Parser):

Value	UDM Field
GENERIC_EVENT	metadata.event_type
VMWARE	metadata.vendor_name
HCX	metadata.product_name
	metadata.product_event_type
	metadata.description
	observer.hostname
	security_result.severity

Product Event Types¶

Event	UDM Event Classification
all event types	GENERIC_EVENT

Log Sample¶

<142>1 2022-07-13T19:14:46.966+00:00  hostname1 - - - [RemotingService_SvcThread-123078] [LEVEL=INFO] c.v.v.h.s.r.j.JobStatusPollAndNotify COMPLETION Received Remote Completion from Non-Initiator: Workflow MobilityMigrationJob/MigrationTracker job (aaaabbbb111-b80e-4d4f-af0f-85701575ffb5 ) State:SYNC_STATUS_ON_TARGET PrevState:UNDEFINED_STATE called by Service:MobilityMigrationService

Sample Parsing¶

metadata.event_timestamp = "2022-07-13T19:15:51.691216Z"
metadata.event_type = "GENERIC_EVENT"
metadata.vendor_name = "VMware"
metadata.product_name = "HCX"
metadata.product_event_type = "RemotingService_SvcThread-123078"
metadata.description = "COMPLETION Received Remote Completion from Non-Initiator: Workflow MobilityMigrationJob/MigrationTracker job"
observer.hostname = "hostname1"
security_result.severity = "INFORMATIONAL"

Parser Alerting¶

This product currently does not have any Parser-based Alerting.

Rules¶

Coming Soon