How do I get a history of vCenter alarms over the last day/month/year?

You can use the following script to list all alerts from the last 24 hours where the alarm state has changed from Green > Yellow, as well as Yellow > Red.

Quite handy if you need an overview of the important events (even if they’ve since been resolved) from the last day. You can easily view events from the last week by changing the adddays(-1) to a -7. Alternatively, adddays(-1) could be replaced by addmonths(-1) or addyears(-1) for an even greater amount of history (assuming your vCenter logs go back that far). Just remember to always use negative numbers to reference the past.

Install PowerCLI and run from there. You can omit the -user and -password switches if you use the SSO service for passthrough authentication.

# Connect to the vCenter server
connect-viserver -server vcenter01 -user admin -password pass

$ Get all events from the previous 1 day
$events = get-vievent -start (get-date).adddays(-1);

# Filter the events down to only include changes to yellow or red, and display in a table
$events | where {$_ -is [VMware.Vim.AlarmStatusChangedEvent] -and ($_.to -eq "yellow" -or $_.to -eq "red") -and $_.to -ne "gray"} | ft fullformattedmessage;

# Connect to the vCenter server

connect-viserver -server vcenter01 -user admin -password pass

$ Get all events from the previous 1 day

$events = get-vievent -start (get-date).adddays(-1);

# Filter the events down to only include changes to yellow or red, and display in a table

$events | where {$_ -is [VMware.Vim.AlarmStatusChangedEvent] -and ($_.to -eq "yellow" -or $_.to -eq "red") -and $_.to -ne "gray"} | ft fullformattedmessage;

HKEY_LOCAL_MACHINE

Every problem is an opportunity.

How do I get a history of vCenter alarms over the last day/month/year?

Leave a Reply Cancel reply