JetStream Software Portal

Monitor JetStream DR for AVS Logs with Azure Log Analytics Scripts

This article applies to all versions of JetStream DR for AVS.

JetStream DR for AVS events and alerts can be monitored using Azure Log Analytics.

Start by configuring VMware syslogs for Azure VMware Solution. This allows VMware syslogs to be collected for your AVS private cloud which can then be used to trigger log alerts that can be scripted to report JetStream DR events and alerts.

Example using Azure Monitor Log Analytics.

Query Scripts to Monitor JetStream Events

Below are some sample scripts for Azure Log Analytics that provide basic functionality to help you get started creating scripts to monitor JetStream DR for AVS.

Query All JetStream Events

AVSSyslog
//| where TimeGenerated > ago(1d)
| where Message has "EventEx"
| where Message has "jetstream"
| project TimeGenerated, Message
| parse Message with * "[JetStream Management Server] [SDDC-Datacenter] ["eventid"] ["eventname
| parse Message with * "[JetStream Management Server] [SDDC-Datacenter] ["eventid"] ["eventname
| parse Message with * "[JetStream Management Server] [SDDC-Datacenter] ["eventid"] ["eventname

Query All JetStream Alarms

AVSSyslog
//| where TimeGenerated > ago(1d)
| where Message has "EventEx"
| where Message has "jetstream"
| where Message has "Alarm"
| project TimeGenerated, Message
| parse Message with * "[JetStream Management Server] [SDDC-Datacenter] ["eventid"] ["eventname

att_1_for_2779807900.png

Query All JetStream Email Events

AVSSyslog
//| where TimeGenerated > ago(1d)
| where Message has "EventEx"
| where Message has "jetstream"
| where Message contains "(email)"
| project TimeGenerated, Message
| parse Message with * "[JetStream Management Server] [SDDC-Datacenter] ["eventid"] ["eventname

Query JetStream DRVA Email Events

AVSSyslog
//| where TimeGenerated > ago(1d)
| where Message has "EventEx"
| where Message has "jetstream"
| where Message contains "(email)"
| where Message has "DRVA"
| project TimeGenerated, Message
| parse Message with * "[JetStream Management Server] [SDDC-Datacenter] ["eventid"] ["eventname

AVSSyslog
//| where TimeGenerated > ago(1d)
| where Message has "EventEx"
| where Message has "jetstream"
| where Message contains "jss-"
| project TimeGenerated, Message
| parse Message with * "[JetStream Management Server] [SDDC-Datacenter] ["eventid"] ["eventname

Was this article helpful?

Related Articles