VMware Monitoring Scope
You can fine-tune Netwrix Auditor by specifying various data types that you want to exclude/include from/in the VMware reports.
Follow the steps to exclude data from the VMware monitoring scope:
Step 1 – Navigate to the %Netwrix Auditor installation folder%\Vmware Auditing folder.
Step 2 – Edit the *.txt files, based on the following guidelines:
- Each entry must be a separate line.
- A wildcard (*) is supported. You can use * for cmdlets and their parameters.
- Lines that start with the # sign are treated as comments and are ignored.
| File | Description | Syntax |
|---|---|---|
| omitproplist.txt | Contains a list of object types and properties to be excluded from change reports. | object_type.property_name If there is no separator (.) between an object type and a property, the whole entry is treated as an object type. For example, to exclude the config.flags.monitorType property from reports, add the following line: *.config.flags.monitorType. |
| hidepropvalues.txt | Contains a list of object types and properties to be excluded from the reports when the property is set to certain value. | object_type.property_name=property_value:object_type.hidden_property For example, to exclude the config.cpuAllocation.shares.level property when it equals to "Low", add the following line: *.config.cpuAllocation.shares .level=low: *.config.cpuAllocation.shares.shares. |
| proplist.txt | Contains a list of human-readable names for object types and properties to be displayed in the reports. | inner_type:object_type.property=intelligiblename Inner_type is optional. For example, if you want the configStatus property to be displayed in the reports as Configuration Status, add the following line: *.configStatus=Configuration Status. |
| omitstorelist.txt | Contains a list of objects to be excluded from being saved to data storage and showing up in reports. Audit data will still be collected. | Monitoring plan name, who, where, object type, what, property name, property value For example, to exclude internal logons: *,*,*,Logon,*,UserAgent,VMware vim-java* The following characters must be preceded with a backslash () if they are a part of an entry value: * , \ ? Characters may be also specified with hex value using \xnnnn template. The spaces are trimmed. If they are required, use hex notation. For example: Word\x0020 where \x0020 (with space at the end) means blank character. |