Friday, August 14, 2015

vCenter Server Watchdog

As we are talking about unnoticed new features on vSphere 6, I’d like to point out a “kind” of new feature, why I say kind ?!? Well mainly because it has been there before, but only available on appliances vCenter and not on the Windows one. Now it has been improved and is working consistently between both platforms. I’m talking about vCenter Watchdog.


 What’s vCenter Watchdog ?

vCenter Watchdog is a high availability feature design to improve the uptime of vCenter services. It monitors them and in case of failure it restart them, making the vCenter available again, in case watchdog cannot restart the service it will leverage HA (High Availability) to restart the VM itself.


How do I enable it ?

You don’t have to, it’s enable by default. One caveat, on Windows servers, after vCenter installation, you need to restart the server once to make watchdog works.


Is there any logs ?

Sure, you can check all it’s activities on the following location:

Windows vCenter: “vCenter_Installation_Dir”\vCenterServer\Logs\iiad\

Appliance vCenter: /var/log/vmware/iiad/


But that it’s not all, Watchdog generates support bundles before restarting the service or the VM and can be found at:

Windows vCenter: “vCenter_Installation_Dir”\vCenterServer\data\core\*tgz

Appliance vCenter: /storage/core/*.tgz

There remains one last question:
Who watches the watchdog ?!?!

Wednesday, August 5, 2015

vSphere 6 Global Permission

There have been so many new features and enhancements on vSphere 6, that sometimes we did not even notice the smaller ones, just like Global Permission. This one will be particular interesting if you have vCenters in linked-mode.

Thanks to enhanced Linked mode on vCenter 6, things are going global, like license, roles and permissions.
Now, when creating roles, you don’t need to specify the vCenter where this role will be created anymore, it’s Global and will be sync among all vCenters on the same SSO Domain.

 Besides roles you now have a new option; Global Permissions.

If you remember back on vSphere 5.X days, there’s no such thing.

The Global Permissions works pretty much the same way of roles and permissions, you set up the role and the permission it would have, but instead of giving specific permissions on each object, you set it as a Global Permission, giving the user/group the privilege on all objects of all objects hierarchies.

Important: Use Global Permission with care and only when justified.

To set it up it’s easy:

- Go to Home/Roles ;

- Select Global Permission and click the plus sign;

 - Add the user/group which will receive the permission, select the role and don’t forget to enable the propagate option;

 On my example I create a role with a privilege just to manage Alarms.

In a few seconds the privileges have been applied to both my vCenters.

Great for applying permissions widely, right ; )

Who am I

My photo
I’m an IT specialist with over 15 years of experience, working from IT infrastructure to management products, troubleshooting and project management skills from medium to large environments. Nowadays I'm working for VMware as a Consulting Architect, helping customers to embrace the Cloud Era and make them successfully on their journey. Despite the fact I'm a VMware employee these postings reflect my own opinion and do not represents VMware's position, strategies or opinions. Reach me at @dumeirell

Most Viewed Posts

Blog Archive