Lists who signed in and what permissions or settings changed, along with other security activity, for NSX, vSAN, VMs, hosts and vCenter. Each search is limited to a 48-hour window, and the page only works once VCF Operations for logs has been deployed from fleet management.
Read more: Broadcom TechDocs
In the Ultra Transcenders books
Each book explains Audit events in context, with comparison tables and the common traps.
Terms in this definition
- AGDLP
Nesting pattern: users go into global groups, which go into domain local groups, which receive the permissions. AGUDLP adds universal groups for forests with several domains.
- AMPRS
An acronym for availability, manageability, performance, recoverability and security: the five design qualities used to sort non-functional requirements and to weigh up trade-offs between design decisions.
- NSX
Software that handles networking and security across VCF, covering firewalling, load balancing, NAT, VPCs, overlay segments and Tier-0/1 gateways.
- vSAN
VMware's software-defined storage, which combines local devices across a cluster's ESX hosts into one shared datastore. Available as OSA or ESA, VCF can use it as principal storage.
- Virtual machines
Infrastructure-as-a-service compute giving complete control of the operating system, making it a fit for lift-and-shift moves and for software relying on OS-level pieces like COM.
- vCenter
Management software for VMs, clusters and ESX hosts. Each domain in VCF gets a dedicated one.
- WINDOW
Returns rows from a sorted, optionally partitioned table, either at fixed positions (ABS) or relative to the current row (REL). Running totals plus moving averages are common uses.
- Once flow
A flow that executes a single time and repeats only if the pipeline is fully refreshed. It's a common choice for a first full load ahead of a change feed, and that refresh becomes dangerous once the original files no longer exist.
Related terms
- Audit log system table
Databricks recommends this over exporting diagnostic logs:
system.access.audit, a Public Preview system table holding audit events from the account's workspaces in a region, retained free for 365 days. - SACL
The system access control list: the section of a security descriptor that says which attempts to access an object are recorded as audit events in the Security log.
- system.access.audit
Records audit events for workspaces in your region, in a system table still in Public Preview. You get 365 days of retention free.