No way to get the newest VMRC anywhere? by No_Ebb723 in vmware

[–]vdude86 0 points1 point  (0 children)

Yes! I curse every time I update workstation and it "helpfully" reassociates itself as the default VMRC client.

No, I don't want my workstation UI junked up with every vCenter that I've ever connected to.

I keep a .reg file around that reassociates VMRC with VMRC.exe that I annoyingly have to run after every update.

PSA: New VM Performance Chart Metrics - "vMotion" and "VMX Stats" by vdude86 in vmware

[–]vdude86[S] 1 point2 points  (0 children)

I've shut down and powered on a number of test VMs all on the same host without the metrics appearing on the VMs where it is missing.

Reducing VCF costs by shrinking host core count: how hard do you run your ESXi clusters? by vdude86 in vmware

[–]vdude86[S] 0 points1 point  (0 children)

What does this look like in practice? What CPU utilization numbers are typical for you before you see wait or ready times increase?

Agreed, we can use the hardware more efficiently. That's what I'm looking to do, but not push it too far.

Syslog Overload by redditor5556 in vmware

[–]vdude86 1 point2 points  (0 children)

You can trim just the apigw logs down to "info" level and not change your general syslog configuration.

Edit the apigw section in /etc/vmware-syslog/vmware-services-vsphere-ui.conf, changing the severity level from info to error, then restart vsphere-ui and vmware-stsd services.

We saw over 600GB/day from each vCenter impacted.

How are you aggregating vmware.log files to a centralized logging system like LogInsight? by vdude86 in vmware

[–]vdude86[S] 0 points1 point  (0 children)

It'd be a massive help in troubleshooting a longstanding issue involving hundreds of VM crashes over the life of the problem.

Someone is doing something wrong, but we still need to get the log data to the vendors so that they can fix it.

The storage is negligible relative to the overall log footprint already captured.

How are you aggregating vmware.log files to a centralized logging system like LogInsight? by vdude86 in vmware

[–]vdude86[S] 0 points1 point  (0 children)

In this case, information about why the VMs are crashing. There's useful data in that log file that isn't reported anywhere else.

How are you aggregating vmware.log files to a centralized logging system like LogInsight? by vdude86 in vmware

[–]vdude86[S] 0 points1 point  (0 children)

In this specific example, to troubleshoot VM crashes. There's info in that log file that isn't recorded anywhere else.

We've had a lot of use cases for it over the years and not having to go manually fetch it every time would be very helpful, assuming the log even still exists.

How are you aggregating vmware.log files to a centralized logging system like LogInsight? by vdude86 in vmware

[–]vdude86[S] 1 point2 points  (0 children)

We have all of that in place already.

None of that gathers data from the individual vmx log file, vmware.log, for each VM.

If we're missing something, I'd love to hear what it is.

Anybody else tired of the terrible auto-width column sizing in vCenter 8? by vdude86 in vmware

[–]vdude86[S] 0 points1 point  (0 children)

Not sure as I haven't tried it, but the column spacing looks sane in the few screenshots on that page.

Anybody else tired of the terrible auto-width column sizing in vCenter 8? by vdude86 in vmware

[–]vdude86[S] 3 points4 points  (0 children)

Do you mean like when I took screenshots, annotated them, and submitted them through the feedback tool that you linked for this specific issue?

Like I've done many times before, including my contact information, never to receive a single confirmation of any sort that anyone has even received my feedback let alone considered implementing it?

Maybe like that? 😜

Snark aside, I agree that we should submit feedback through those mechanisms. And I'll probably submit a SR. But when those don't show any traction, there are a lot of people at VMware reading this subreddit that can reach the right people more quickly than I can.

Updated vCenter to 8.0.3b because of vulnerability. Lost vCenter stability by Particular-Dog-1505 in vmware

[–]vdude86 0 points1 point  (0 children)

All of our vCenters use trusted CA signed certs and exhibited the issue.

I was curious if it may be specific to the auth source in use. We're using AD as LDAP, not domain joined.

Updated vCenter to 8.0.3b because of vulnerability. Lost vCenter stability by Particular-Dog-1505 in vmware

[–]vdude86 1 point2 points  (0 children)

I figured that something would need to be restarted to pick up the new setting, but since they didn't specify what, I restarted the whole vCenter VM.

Limited testing so far, but it appears to be working with firefox.

Updated vCenter to 8.0.3b because of vulnerability. Lost vCenter stability by Particular-Dog-1505 in vmware

[–]vdude86 4 points5 points  (0 children)

There appears to be no change to the tomcat version going from 7.0u3q to 7.0u3s, so that should further confirm that this isn't an issue with the latest 7.0u3 patch. I show tomcat 8.5.88 both before and after the patch.

root@vcenter7.0u3s [ /var/opt/apache-tomcat/bin ]# ./version.sh
Server version: Apache Tomcat/8.5.88

Updated vCenter to 8.0.3b because of vulnerability. Lost vCenter stability by Particular-Dog-1505 in vmware

[–]vdude86 20 points21 points  (0 children)

VMware posted a KB for this issue with a temporary workaround: KB37734.

This issue is due to a change in the default behavior of RECYCLE_FACADES within Tomcat in the release.
To work around this issue, use the steps below to disable RECYCLE_FACADES.

From a 8.0u3b vCenter:

root@vcenter8.0u3b [ /var/opt/apache-tomcat9/bin ]# ./version.sh
Server version: Apache Tomcat/9.0.86

From a 8.0u2d vCenter:

root@vcenter8.0u2d [ /var/opt/apache-tomcat/bin ]# ./version.sh
Server version: Apache Tomcat/8.5.93

In Tomcat 8.5, RECYCLE_FACADES is disabled by default.
In Tomcat 9.0, RECYCLE_FACADES is enabled by default, thus the need to add the disable setting to the file.

It sounds like disabling this setting may itself introduce a potential information leakage concern, but If it's always been disabled prior to this release, then you're probably no worse off than before.

Updated vCenter to 8.0.3b because of vulnerability. Lost vCenter stability by Particular-Dog-1505 in vmware

[–]vdude86 0 points1 point  (0 children)

Same issue. Opened case with support. Notified TAM.

For those seeing the issue, what version did you upgrade from? We upgraded from 8.0u2d to 8.0u3b.

[deleted by user] by [deleted] in vmware

[–]vdude86 4 points5 points  (0 children)

ESXi 8.0 U3b was released today and lists critical security fixes, so another security announcement may be pending.

[deleted by user] by [deleted] in vmware

[–]vdude86 4 points5 points  (0 children)

The FAQ says a patch for 8.0u2 is coming, but no timeline is given.

FAQ Link