5.1

The following table lists vShield Endpoint events reported by the SVM and the vShield Manager (VSM).
Table 14-3. vShield Endpoint Events
Description Severity VC Arguments
vShield Endpoint solution SolutionName enabled. Supporting
version versionNumber of the VFile protocol.
info timestamp
ESX module enabled. info timestamp
ESX module uninstalled. info timestamp
The vShield Manager has lost connection with the ESX module. info timestamp
vShield Endpoint solution SolutionName was contacted by a non-
compatible version of the ESX module.
error timestamp, solution version, ESX
module version
A connection between the ESX module and SolutionName failed. error timestamp, ESX module version,
solution version
vShield Endpoint failed to connect to the SVM. error timestamp
vShield Endpoint lost connection with the SVM. error timestamp
vShield Endpoint Audit Messages
Audit messages include fatal errors and other important audit messages and are logged to vmware.log.
The following conditions are logged as AUDIT messages:
n
Thin agent initialization success (and version number.)
n
Thin agent initialization failure.
n
Established first time communication with SVM.
n
Failure to establish communication with SVM (when first such failure occurs).
Generated log messages have the following substrings near the beginning of each log message: vf-AUDIT, vf-
ERROR, vf-WARN, vf-INFO, vf-DEBUG.
Chapter 14 vShield Endpoint Events and Alarms
VMware, Inc. 175