Documenti di Didattica
Documenti di Professioni
Documenti di Cultura
Version 9.5
Important! Please read the End User Software License Agreement before using the accompanying software
program(s). Using any part of the software indicates that you accept the terms of the End User
Software License Agreement.
Customer Support
Should you have a technical concern, suggestion or question, please visit our Customer Center Portal
at www.veeam.com/support.html to open a case, search our knowledge base, reference
documentation, manage your license or obtain the latest product release.
Company Contacts
For the most up to date information about company contacts and offices location, please visit
www.veeam.com/contacts.html.
Online Support
If you have any questions about Veeam ONE, you can use the following resources:
Full documentation set: www.veeam.com/documentation-guides-datasheets.html
Community forum at forums.veeam.com
Intended Audience
The guide is designed for anyone who plans to use the Veeam ONE solution. It is primarily aimed at
administrators managing Veeam Backup & Replication, VMware vSphere and Microsoft Hyper-V
environments, but can also be helpful for other current and perspective Veeam ONE users.
Revision 1 11/16/2016 Initial version of the document for Veeam ONE 9.5.
Revision 2 12/30/2016 Added sections VMware vSphere Alarms and Microsoft Hyper-V Alarms.
Linking Rules
One alarm can include up to 8 rules. You can link two or more rules with the help of Boolean
operators:
AND if rules are joined with this operator, an alarm is triggered when conditions for all
linked rules are met.
OR if rules are joined with this operator, an alarm is triggered when a condition for any of
the linked rules is met.
You can form several groups of linked rules and join them with different operators. To learn how to
link rules, see Step 3. Specify Alarm Rule(s) and Severity.
The Alarm Management view is divided into three panes inventory pane, information pane and
actions pane.
The inventory pane on the left shows the alarm management tree with alarm types (virtual
infrastructure components to which alarms can be applied, vCloud Director components,
Veeam Backup & Replication infrastructure components and internal alarms).
The information pane contains the list of predefined and custom alarms for the type that is
selected in the alarm management tree. Every alarm is described with the following details:
type, name, source, state (Enabled or Disabled), assignment scope and resolve action
(Automatic or Manual). The bottom section of the information pane displays alarm knowledge
base information on the selected alarm, such as summary, cause, resolution and external
resources.
The Actions pane on the right displays a list of links for performing alarm actions.
Note: 1. When you specify objects to exclude, use object display names. To learn an exact object
display name, navigate to a performance chart for the necessary object in Veeam ONE
Monitor, and choose a chart view with the necessary counter. You can check the object
display name either in the chart legend or in the Select Devices and Counters window >
Devices list. For details, see Veeam ONE Monitor Guide, section Selecting Chart Views and
Performance Counters.
2. Names of drives must be specified with the backward slash, for example, C:\; Z:\.
Note: To be able to receive email and trap notifications, you must first configure mail and trap notification
settings in the Veeam ONE Monitor Configuration Wizard or in Veeam ONE Monitor server settings.
To learn how to configure notification settings for alarms, see Configuring Alarm Notification
Settings.
Note: 1. To enable the Veeam Backup activity option, make sure that you connected a Veeam Backup &
Replication server to Veeam ONE. Otherwise, alarms will not be suppressed during Veeam Backup
activity.
2. Snapshot creation and Snapshot deletion suppression options apply to VMware vSphere alarms
only.
Note: You can use this option with objects for which Veeam ONE collects performance data. For objects
that do not have any performance data, such as datacenters and clusters, this option is not available.
Note: When you exclude an object from an alarm, all unresolved Warning or Error notifications that were
triggered by this alarm for the object will change their status to Resolved.
Disabling Alarms
You can disable alarms that you do not use for monitoring:
1. Open Veeam ONE Monitor.
2. At the bottom of the information pane, click Alarm Management.
3. In the information pane, select the necessary alarm.
Press and hold the [CTRL] or [SHIFT] key on the keyboard to select multiple alarms.
4. Do one of the following:
Right-click the selection and choose Disable from the shortcut menu.
In the Actions pane on the right, click Disable.
Note: After you disable an alarm, all unresolved Warning or Error notifications that were triggered by this
alarm will change their status to Resolved.
Enabling Alarms
To enable alarms that were previously disabled:
1. Open Veeam ONE Monitor.
2. At the bottom of the information pane, click Alarm Management.
3. In the information pane, select the necessary alarm.
Press and hold the [CTRL] or [SHIFT] key on the keyboard to select multiple alarms.
4. Do one of the following:
Right-click the selection and choose Enable from the shortcut menu.
In the Actions pane on the right, click Enable.
Note: When you delete an alarm in the Alarm Management view, Veeam ONE retains its history all
triggered alarms and alarm status changes will be available on the Alarms view.
The status of a deleted alarm is changed to Resolved. To view history of a deleted alarm, you need to
apply the Show resolved alarms filter. For details on working with triggered alarms, see Viewing
Triggered Alarms.
Exporting Alarms
To export alarms to an XML file:
1. Open Veeam ONE Monitor.
2. At the bottom of the inventory pane, click Alarm Management.
3. In the alarm management tree, select the type of infrastructure object for which you want to
export alarms.
4. Right-click the object and choose Export Alarms from the shortcut menu.
5. Save the XML file with alarm settings.
Importing Alarms
To import alarms from an XML file:
1. Open Veeam ONE Monitor.
2. At the bottom of the inventory pane, click Alarm Management.
3. In the alarm management tree, right-click any object and choose Import Alarms from the
shortcut menu.
4. In the Alarms Import window:
Specify a path to an XML file with alarm settings.
Select the Import assignment check box if you want to import a list of alarms
together with their assignment settings.
Select the Replace all existing alarms check box if you want to replace existing
alarms with imported alarms.
If you do not select this check box but during import Veeam ONE detects an alarm
with a matching name, Veeam ONE will suggest you to update settings of the
existing alarm with data from the XML file. You can either replace the existing alarm
with the alarm from the XML file, or leave the existing alarm without any changes.
If an alarm in the XML file does not match any existing alarm by name, Veeam ONE
will create a new alarm.
Note: You can customize the email template for Mission Critical notifications only. You cannot modify the
template for alarm summary notifications sent in accordance with the Other notification policy. For
more information on notification policies, see Step 2. Configure Notification Frequency.
Users in your organization often forget to delete snapshots they do not use. You want Veeam ONE
to notify the administrator by email about VMs with multiple snapshot problems, such as large and
outdated snapshots.
To detect problems with forgotten snapshots, you can create an alarm based on two already existing
alarms: Latest snapshot age and Latest snapshot size:
1. Open Veeam ONE Monitor.
2. At the bottom of the inventory pane, click Alarm Management.
3. In the alarm management tree, select All Alarms > VMware > Virtual Machine.
4. In the Actions pane on the right, click the New link.
5. In the Alarm Settings window, open the General tab and specify the alarm name Multiple
snapshot problems.
6. Open the Rules tab and add two rules that are based on existing alarms:
Latest snapshot size
Latest snapshot age
7. Select check boxes for both rules and click Link on the right. In the Rule condition window,
choose AND and click OK.
Expected Result
The Multiple snapshot problems alarm is based on existing alarms: Latest snapshot age and Latest
snapshot size. Default thresholds for these alarms are:
If the age of the latest snapshot is more than 48 hours, an Error alarm is triggered.
If the size of the latest snapshot is more than 10% of the VM size, a Warning alarm is triggered.
If the size of the latest snapshot is more than 20% of the VM size, an Error alarm is triggered.
According to these settings, Veeam ONE:
Will trigger a Multiple snapshot problem Warning alarm for VMs that have snapshots with the
age more than 48 hours and size more than 10% but less than 20%.
Will trigger a Multiple snapshot problem Error alarm for VMs that have snapshots with the age
more than 48 hours and size more than 20%.
The administrator will be notified about Warning and Error alarms by email.
VMs on a Hyper-V host are trying to consume more RAM than there are memory resources available
on a host. This makes operating system swap the content of memory to disk. This negatively affects
the performance and causes host disk latency. You want to get notifications when Veeam ONE
detects host disk latency caused by the increased hard page faults. This way you will find out that
VMs lack RAM.
12. In the Select Alarm window, search for the Disk Latency caused by Hard Page Faults alarm and
click Add.
13. In the Alarm Settings window, open the Rules tab.
14. For the new counter Disk/Host: Avg Disk sec/read, specify triggering thresholds:
Warning: 70 Milliseconds
Error: 90 Milliseconds
Time period: 10 minutes
15. Select the check boxes of the two rules and click Link.
16. In the Rule condition window, select the And rule and click OK.
Finding Alarms
To quickly find the necessary alarms, you can use filters and controls at the top of the Alarms list.
Enterprise Manager
Resolve
Alarm Name Event/Condition Severity Description
Action
Veeam
Veeam ONE failed
Backup
to connect to
Enterprise
State not equals Connected. Error Automatic Veeam Backup
Manager
Enterprise
connection
Manager.
failure
Resolve
Alarm Name Event/Condition Severity Description
Action
One or more
backup copy jobs
exceeded defined
Backup copy
Based on event window, and data
job exceeded
VeeamBpCopyJobNetworkWindowExceede Error Manual transfer between
data transfer
dEvent source and target
window
backup
repositories has
been stopped.
Based on event One or more VMs
Error
VeeamBpBackupSyncSessionErrorEvent could not be
Backup copy
Manual successfully
job state Based on event
Warning copied from the
VeeamBpBackupSyncSessionWarningEvent backup repository.
Job is in a disabled
Backup job state for more that
Job is disabled for more than 12 hours Warning Automatic
disable allowed time
period.
Based on event
Error One or more VMs
Backup job VeeamBpBackupSessionErrorEvent
Manual failed to backup
state Based on event
Warning successfully.
VeeamBpBackupSessionWarningEvent
Based on event
Error
VeeamBpFileTapeSessionErrorEvent
Based on event One or more VMs
Backup to Error
VeeamBpVmTapeSessionErrorEvent failed to be
tape job Manual
Based on event transferred to the
status Warning
VeeamBpFileTapeSessionWarningEvent tape device.
Based on event
Warning
VeeamBpVmTapeSessionWarningEvent
Based on event One or more files
Warning
File copy job VeeamBpCopySessionWarningEvent failed to be
Manual
state Based on event transferred to the
Error destination folder.
VeeamBpCopySessionErrorEvent
One or more jobs
Job exceeded exceeded allowed
Based on event
backup Error Manual backup window
VeeamBpJobWindowExceededEvent
window and has been
terminated.
Based on event
Warning
VeeamBackupServerLicenseExpiration
License Based on event Veeam Backup &
Resolve
expiration VeeamBackupServerLicenseChanged Automatic Replication license
date Based on event expired.
VeeamBackupServerLicenseExpirationResol Resolve
ve
Job duration is more than 480 minutes Error Job has exceeded
Max allowed
Manual its allowed
job duration Job duration is more than 120 minutes Warning execution time.
Based on event
Quick Warning One or more VMs
VeeamBpQMigrationSessionWarningEvent
Migration job Manual failed to migrate
Based on event to another host.
state Error
VeeamBpQMigrationSessionErrorEvent
Based on event
Error One or more VMs
Replication VeeamBpRepSessionErrorEvent
Manual failed to replicate
job state Based on event
Warning successfully.
VeeamBpRepSessionWarningEvent
Based on event
VeeamBackupServerLicenseSupportExpirati Warning
on Veeam Backup &
Support
Based on event Replication
expiration Resolve Automatic
VeeamBackupServerLicenseChanged prepaid support
date
Based on event contract expired.
VeeamBackupServerLicenseSupportExpirati Resolve
onResolved
Based on event One or more VMs
Error
SureBackup VeeamBpSbSessionErrorEvent could not be
Manual
job state Based on event successfully
Warning verified.
VeeamBpSbSessionWarningEvent
Veeam
Backup & Connection to
Replication Veeam Backup &
State not equals Connected Error Automatic
Server Replication server
connection failed.
failure
Based on event Veeam Broker
VeeamBackupServerBrokerServiceDownEve Warning Service that
nt interacts with
Veeam Based on event virtual
Broker VeeamBackupServerBrokerServiceDownEve Resolve Automatic infrastructure to
Service state nt collect and cache
Based on event its topology is not
VeeamBackupServerBrokerServiceDownEve Resolve started and not
nt working properly.
Repository
Resolve
Alarm Name Event/Condition Severity Description
Action
State equals Not accessible for more than 5 Veeam Backup &
Backup Error
minutes Replication server
repository
Automatic lost connection to
connection State equals Warning for more than 5
Warning the backup
failure minutes repository.
Backup Free space is below 5% Error Backup repository
repository Automatic is low on free
Free space is below 10% Warning space.
free space
Veeam backup
Backup repository version
repository does not match
Component version mismatch Warning Automatic
version is out- the version of
of-date Veeam Backup &
Replication server.
Proxy
Resolve
Alarm Name Event/Condition Severity Description
Action
Resolve
Alarm Name Event/Condition Severity Description
Action
Tape Server
Resolve
Alarm Name Event/Condition Severity Description
Action
Cloud Repository
Resolve
Alarm Name Event/Condition Severity Description
Action
Resolve
Alarm Name Event/Condition Severity Description
Action
VeeamDPCacheEvent Warning
Veeam ONE failed to write
Disk cache
VeeamDPCacheResolvedEvent Resolve performance data to the
error
disk cache folder.
VeeamMonitorServicesStartedEvent Resolve
VeeamEventCollectionFailedEvent Error
Events data Veeam ONE failed to
collection VeeamEventCollectionFailedResolvedEvent Resolve collect events data from
failure the objects specified.
VeeamMonitorServicesStartedEvent Resolve
VeeamInfCollectionFailedEvent Error
Topology Veeam ONE failed to
collection VeeamInfCollectionFailedResolvedEvent Resolve collect infrastructure
failure topology.
VeeamMonitorServicesStartedEvent Resolve
VeeamLicenseExpirationWarningEvent Warning
VeeamMonitorServicesStartedEvent Resolve
VeeamLicenseSupportExpirationWarningEvent Warning
VeeamMonitorServicesStartedEvent Resolve
VeeamNoHostConnectionEvent Error
Virtual Server Connection to virtual
connection server has failed.
VeeamNoHostConnectionResolvedEvent Resolve
Enterprise Manager
Resolve
Alarm Name Rule Event Severity Description
Action
VeeamBpBackupSyncSessionErr
Error One or more VMs could
orEvent
Backup copy job not be successfully
Manual
state VeeamBpBackupSyncSessionWa
copied from the backup
Warning repository.
rningEvent
Job is in a disabled
Backup job
N/A Warning Automatic state for more that
disable
allowed time period.
VeeamBpBackupSessionErrorEve
Error
nt
One or more VMs failed
Backup job state Manual
to backup successfully.
VeeamBpBackupSessionWarnin
Warning
gEvent
VeeamBpFileTapeSessionErrorEv
Error
ent
VeeamBpVmTapeSessionErrorEv
Error
ent One or more VMs failed
Backup to tape
Manual to be transferred to the
job status VeeamBpFileTapeSessionWarnin tape device.
Warning
gEvent
VeeamBpVmTapeSessionWarnin
Warning
gEvent
VeeamBpCopySessionWarningE
Warning One or more files failed
vent
File copy job state Manual to be transferred to the
destination folder.
VeeamBpCopySessionErrorEvent Error
VeeamBackupServerLicenseExpi
Warning
ration
Veeam Backup &
License expiration VeeamBackupServerLicenseCha
Resolve Automatic Replication license
date nged
expired.
VeeamBackupServerLicenseExpi
Resolve
rationResolve
Error
Max allowed job Job has exceeded its
N/A Manual
duration Warning
allowed execution time.
VeeamBpQMigrationSessionWar
Warning
ningEvent One or more VMs failed
Quick Migration
Manual to migrate to another
job state VeeamBpQMigrationSessionErro host.
Error
rEvent
VeeamBpRepSessionErrorEvent Error
One or more VMs failed
Replication job
Manual to replicate
state VeeamBpRepSessionWarningEv
Warning successfully.
ent
VeeamBackupServerLicenseSup
Warning
portExpiration
Veeam Backup &
Support VeeamBackupServerLicenseCha Replication prepaid
Resolve Automatic
expiration date nged support contract
expired.
VeeamBackupServerLicenseSup
Resolve
portExpirationResolved
VeeamBpSbSessionErrorEvent Error
One or more VMs could
SureBackup job
Manual not be successfully
state VeeamBpSbSessionWarningEve
Warning verified.
nt
Repository
Resolve
Alarm Name Rule Event Severity Description
Action
Error
Backup repository Backup repository is low
N/A Automatic
free space Warning
on free space.
Veeam backup
Backup repository repository version does
version is out-of- N/A Warning Automatic not match the version
date of Veeam Backup &
Replication server.
Proxy
Resolve
Alarm Name Rule Event Severity Description
Action
Tape Server
Resolve
Alarm Name Rule Event Severity Description
Action
Cloud Repository
Resolve
Alarm Name Rule Event Severity Description
Action
Warning
Cloud repository Cloud repository is low
N/A Automatic
free space Error
on available free space.
vCenter Server
Resolve
Alarm Name Event/Condition Severity Description
Action
Cluster
Resolve
Alarm Name Event/Condition Severity Description
Action
Host
Resolve
Alarm Name Event/Condition Severity Description
Action
Based on event
esx.problem.storage.iscsi.targ
et.login.error
Based on event This event records that
DrsExitStandbyModeFailedEv Error Distributed Power
ent Management tried to
Based on event bring a host out of
Resolve standby mode, but
DrsExitedStandbyMode
failed.
DPM failed to bring Standby Mode powers
host out of standby Automatic off a host and allows it
mode to be powered back on
Based on event again through the
Resolve Wake-on-LAN protocol.
ExitedStandbyMode
It can be triggered
either manually or
automatically by
vCenter Server.
This event records that
the host has
successfully entered
standby mode initiated
by Distributed Power
Based on event
DRS host standby Management. A host in
DrsEnteredStandbyModeEve Information Automatic
mode entrance this mode has no
nt
running virtual
machines and no
provisioning
operations are
occurring.
This event records that
Distributed Power
DRS host standby Based on event
Information Automatic Management brings
mode exit DrsExitedStandbyModeEvent
this host out from
standby mode.
This event records
when resource
Based on event
DRS synchronization configuration
DrsResourceConfigureFailedE Error Manual
failure specification
vent
synchronization fails
on a host.
The list of hosts that
have the DVS
DVS host
Based on event configuration on the
configuration out of Warning Manual
OutOfSyncDvsHost host diverged from
sync
that of the vCenter
Server.
Based on event Link Aggregation
esx.problem.net.lacp.uplink.fa Control Protocol
ESX(i) host network il.duplex (LACP) is included in
Error Manual
uplink failure Based on event IEEE specification as a
esx.problem.net.lacp.uplink.fa method to control the
il.speed bundling of several
Based on event
esx.problem.visorfs.inodetabl Warning One of the host's
ESX(i) host storage e.full ramdisks reached the
Manual
warning Based on event limit for the number of
esx.problem.visorfs.ramdisk.f Warning files it can contain.
ull
Average memory usage is for
Warning
15 minutes is above 80%
Host available This host is low on
Automatic
memory available memory.
Average memory usage is for Error
15 minutes is above 90%
Host state equals
Disconnected for 5 minutes This alarm monitors
and more. the VMware vCenter
Host connection
Warning Automatic Server API for events
failure Host state equals Not indicating that a host is
responding for 5 minutes and disconnected.
more.
Based on event This event indicates
vprob.net.connectivity.lost that one or more
Based on event Error portgroups in the host
esx.problem.net.connectivity. have lost connectivity
Host connectivity lost to the network,
Automatic
failure resulting in
Based on event unavailability of all
esx.clear.net.connectivity.rest Resolve physical connections
ored to the network from
this switch.
Average CPU Ready for 15
Warning This Host has exceeded
minutes is above 15%
Host CPU ready Automatic the threshold for CPU
Average CPU Ready for 15 Ready Percent.
Error
minutes is above 25%
Average CPU usage for 15
Warning This host has exceeded
minutes is above 75%
Host CPU usage Automatic the threshold for CPU
Average CPU usage for 15 usage.
Error
minutes is above 95%
Average datastore bus resets
Warning This host disk (vmhba)
for 15 minutes is above 2
Host disk bus resets Automatic has logged one or
Average datastore bus resets more SCSI bus resets.
Error
for 15 minutes is above 4
Average datastore command
aborts for 15 minutes is Warning
above 2 This host disk (vmhba)
Host disk SCSI aborts Automatic has logged one or
Average datastore command more SCSI aborts.
aborts for 15 minutes is Error
above 4
Based on event This event records that
Error
ExitStandbyModeFailedEvent the host failed to exit
standby mode.
Standby Mode powers
off a host and allows it
Host failed to exit to be powered back on
Automatic
standby mode Based on event again through the
Resolve
ExitedStandbyMode Wake-on-LAN protocol.
It can be triggered
either manually or
automatically by
vCenter Server.
An invalid storage
Based on event
SCSI unsupported module attempted to
esx.problem.scsi.unsupported Warning Manual
plugin warning configure a SCSI
.plugin.type
device.
Based on event
vprob.storage.connectivity.lo
st The event indicates a
Error loss in connectivity to
Based on event
Storage connection the specified storage
esx.problem.storage.connecti Automatic
failure device. The path
vity.lost
indicated is the last
Based on event path that went down.
esx.clear.storage.connectivity. Resolve
restored
Based on event
vprob.storage.redundancy.los
t
Based on event A host has lost a path
vprob.storage.redundancy.de to access the specified
graded storage and the path
Warning
Based on event to storage is either
Storage connection
esx.problem.storage.redunda Automatic degraded, or no longer
redundancy failure
ncy.degraded redundant. Check the
Based on event event description and
esx.problem.storage.redunda context to confirm the
ncy.lost status.
Based on event
esx.clear.storage.redundancy. Resolve
restored
The teaming
configuration of the
Teaming mismatch Based on event uplink ports in the DVS
Error Manual
error TeamingMisMatchEvent does not match
physical switch
configuration.
Based on event MTU health check
Uplink port MTU
UplinkPortMtuNotSupportEv Error Manual status of an uplink port
error
ent is changed.
Based on event Vlans health check
Uplink port VLAN
UplinkPortVlanUntrunkedEve Error Manual status of an uplink port
error
nt is changed.
Based on event
HostConnectionLostEvent
Error vCenter Server has lost
vCenter Server lost Based on event
Automatic connection to this
connection to host HostCnxFailed
host.
Based on event
Resolve
HostConnectedEvent
This event records an
vMotion license Based on event
Error Manual expired vMotion
expired VMotionLicenseExpiredEvent
license.
A larger MTU
(maximum
transmission unit)
bring greater efficiency
because each packet
carries more user data
while protocol
overheads; the
resulting higher
efficiency means a
slight improvement in
bulk protocol
vSphere Distributed throughput. A larger
Based on event
Switch MTU Error Manual MTU also means
MtuMismatchEvent
mismatch processing of fewer
packets for the same
amount of data.
However, this gain is
not without some
downside. Large
packets can occupy a
slow link for some
time, causing greater
delays to following
packets and increasing
lag and minimum
latency.
Virtual Machine
Resolve
Alarm Name Event/Condition Severity Description
Action
The customization
Based on event
Customization sequence failed
CustomizationUnknownFailu Warning Manual
unknown failure unexpectedly in
re
the guest.
This event records
Based on event
Fault Tolerance VM a secondary or
VmFaultToleranceVmTermin Warning Manual
terminated primary VM is
atedEvent
terminated.
This event records
Based on event
FT VM Failover Error Manual a fault tolerance
VmPrimaryFailoverEvent
failover.
The customization
sequence in the
Guest customization Based on event guest failed.
Warning Manual
failure CustomizationFailed Cannot complete
customization of
VM.
Guest disk free space space is
Warning Guest OS volume
below 10%
Guest disk space Automatic is low on available
Guest disk free space space is guest disk space.
Error
below 5%
Resolve
Alarm Name Event/Condition Severity Description
Action
Resolve
Alarm Name Event/Condition Severity Description
Action
Based on event
Error
vprob.vmfs.error.volume.is.locked
Based on event The alarm indicates
vCenter
esx.problem.vmfs.error.volume.is.loc Error that a VMFS
storage ked Manual volume on the
availability
Based on event ESX(i) host is locked
error Warning
vprob.vmfs.extent.offline due to an I/O error.
Based on event
Warning
esx.problem.vmfs.extent.offline
There is an issue
vSphere Based on event with VMware high-
cluster HA com.vmware.vc.HA.HostDasErrorEve Error Manual availability
error nt configuration for
this host.
Based on event
com.vmware.vc.HA.InvalidMaster
Based on event
com.vmware.vc.HA.UserHeartbeatD
atastoreRemoved
Based on event
com.vmware.vc.HA.VcCannotFindM
asterEvent
There is an issue
Based on event
vSphere with VMware high-
com.vmware.vc.HA.HostPartitionedF
cluster HA Warning Manual availability
romMasterEvent
warning protection for this
Based on event cluster.
com.vmware.vc.HA.HostUnconfigure
dWithProtectedVms
Based on event
com.vmware.vc.HA.HostUnconfigure
Error
Based on event
com.vmware.vc.HA.NotAllHostAddrs
Pingable
Resolve
Alarm Name Event/Condition Severity Description
Action
Resolve
Alarm Name Rule Event Severity Description
Action
Resolve
Alarm Name Rule Event Severity Description
Action
Resolve
Alarm Name Rule Event Severity Description
Action
Host
Resolve
Alarm Name Event/Condition Severity Description
Action
The Hyper-V
Networking
Management
Host
Service is not
Networking *Hyper-V Networking Management*
configured to start
Management service is not running for 5 minutes or Error Automatic
automatically.
service is not more
Virtual networks
running
cannot be
managed until the
service is started.
Host node Based on event
Host node failed to
failed to form a 1573 Microsoft-Windows- Error Manual
form a cluster.
cluster FailoverClustering
Host node failed to
join the cluster
because it could
Host node Based on event
not send and
failed to join 1572 Microsoft-Windows- Error Manual
receive failure
cluster FailoverClustering
detection network
messages with
other cluster nodes.
Cluster host node
Host node was Based on event
has been evicted
evicted from 1011 Microsoft-Windows- Warning Manual
from the failover
cluster FailoverClustering
cluster.
Cluster node was
removed from the
active failover
cluster
Host node was Based on event membership. If the
removed from 1135 Microsoft-Windows- Error Manual Cluster service fails
cluster FailoverClustering to start on a failover
cluster node, the
node cannot
function as part of
the cluster.
Host operation
Based on event system has been
Host restart Information Automatic
1074 User32 restarted or shut
down.
The cluster service
has determined
that this node does
not have the latest
Missing latest
Based on event copy of cluster
cluster
1561 Microsoft-Windows- Error Manual configuration data.
configuration
FailoverClustering Therefore, the
data
cluster service has
prevented itself
from starting on
this node.
Cluster node lost
communication
Network Based on event with another
communication 1592 Microsoft-Windows- Warning Manual cluster node.
failure FailoverClustering Network
communication
was reestablished.
Cluster network
interface for cluster
node is
Unreachable Based on event
unreachable by at
cluster network 1126 Microsoft-Windows- Warning Manual
least one other
interface FailoverClustering
cluster node
attached to the
network.
The service
required to manage
Virtual Machine virtual machines is
Management *Hyper-V Virtual Machine not running. No
Error Automatic
service is not Management* service is not running virtual machine
running management
operations can be
performed.
Virtual Machine
Resolve
Alarm Name Event/Condition Severity Description
Action
Cannot merge
disk file on
Based on event deletion. As a
Failed to merge
16210 Microsoft-Windows-Hyper-V- Warning Manual result, this disk
virtual disk
VMMS might be in
inconsistent
state.
Based on event
12010 Microsoft-Windows-Hyper-V-
Worker
Based on event
12030 Microsoft-Windows-Hyper-V-
Failed to power Worker Failed to power
Error Manual
on VM Based on event on VM.
12040 Microsoft-Windows-Hyper-V-
Worker
Based on event
12050 Microsoft-Windows-Hyper-V-
Worker
Based on event
Failed to Failed to restore a
12080 Microsoft-Windows-Hyper-V- Error Manual
restore VM VM.
Worker
Based on event
Failed to save Failed to save
12054 Microsoft-Windows-Hyper-V- Error Manual
VM state for a VM.
Worker
Guest disk free space is below 10% Warning Guest OS volume
Guest disk is low on
Automatic
space Guest disk free space is below 5% Error available guest
disk space.
The age of the
checkpoint
Hyper-V VM (latest) for this
VM checkpoint age is 48 hours or more Warning Automatic
checkpoint age VM has exceeded
the configured
threshold.
Hyper-V VM checkpoint size is above The VM has been
Warning
10% of the VM size running on a
checkpoint for
extended period
of time, which
exceeded the
Hyper-V VM configured
Automatic
checkpoint size Hyper-V VM checkpoint size is above threshold for the
Error checkpoint size. A
20% of the VM size
checkpoint
preserves the
state and data of
a VM at a specific
point in time.
The version of a
component of
Incompatible
Based on event integration
version of
4010 Microsoft-Windows-Hyper-V- Warning Manual services is
integration
Integration incompatible
services
with another
version.
Hyper-V disk
Based on event
Insufficient space is low on
16050 Microsoft-Windows-Hyper-V- Warning Manual
disk space available free
VMMS
space.
Based on event
12560 Microsoft-Windows-Hyper-V- By default, new
SynthNic virtual machines
Based on event in Hyper-V are
Invalid static
12560 Microsoft-Windows-Hyper-V- Error Manual created with NICs
MAC address
Worker that are assigned
Based on event dynamic MAC
12560 Microsoft-Windows-Hyper-V- addresses.
VMMS
Failure in
Machine Based on event machine
remoting 12480 Microsoft-Windows-Hyper-V- Warning Manual remoting system
system failure Worker has been
detected.
VM has been
Based on event
No disk space paused because it
16060 Microsoft-Windows-Hyper-V- Error Manual
to run this VM has run out of
VMMS
disk space.
Based on event
3122 Microsoft-Windows-Hyper-V- Hyper-V was
Not enough
Worker unable to allocate
memory to Error Manual
Based on event RAM resources to
start a VM
3030 Microsoft-Windows-Hyper-V- start this VM.
Worker
Total run time is above 70% and virtual
storage write is above 40 MB/s for 5 Warning Veeam ONE
Possible minutes. detected
ransomware Automatic suspicious
Total run time is above 80% and virtual activity on this
activity
storage write is above 60 MB/s for 5 Error VM.
minutes.
Based on event By default, new
12562 Microsoft-Windows-Hyper-V- virtual machines
SynthNic in Hyper-V are
Static MAC
Warning Manual created with NICs
address conflict Based on event that are assigned
12562 Microsoft-Windows-Hyper-V- dynamic MAC
Worker addresses.
Based on event This VM has
Unexpected
16020 Microsoft-Windows-Hyper-V- Error Manual encountered an
VM error
VMMS unexpected error.
Based on event
16410 Microsoft-Windows-Hyper-V- The configuration
VM VMMS of virtual machine
configuration is Error Manual
Based on event is no longer
not accessible
16400 Microsoft-Windows-Hyper-V- accessible.
VMMS
The VM
VM Based on event
configuration is
configuration 4096 Microsoft-Windows-Hyper-V- Error Manual
no longer
module error Config
accessible.
Average guest run time for 15 minutes This VM has
VM CPU usage Warning Automatic
is above 75% exceeded the
Cluster
Resolve
Alarm Name Event/Condition Severity Description
Action
An attempt to
forcibly start the
cluster service
has failed
Cluster
Based on event because the
configuration
1575 Microsoft-Windows- Error Manual cluster
data is missing
FailoverClustering configuration
or corrupt
data on host
node is either
missing or
corrupt.
The failover
cluster database
could not be
unloaded and
any potentially
incorrect
Cluster changes in
configuration Based on event memory could
database 1593 Microsoft-Windows- Error Manual not be
cannot be FailoverClustering discarded. The
unloaded cluster service
will attempt to
repair the
database by
retrieving it from
another cluster
node.
The cluster
database could
not be loaded.
Cluster Based on event Ensure that a
database could 1057 Microsoft-Windows- Error Manual good copy of
not be loaded FailoverClustering the cluster
configuration is
available to the
node.
Based on event When placing a
Resolve
VeeamHvClusterReserveStateOkEvent virtual machine
in a failover
cluster, the
placement
process
calculates
Cluster whether the
memory new virtual
Based on event Automatic
overcommitme machine will
VeeamHvClusterReserveStateErrorEven Error over-commit the
nt
t cluster. If the
action will over-
commit the
cluster, the
corresponding
alarm will be
fired.
Cluster Based on event
Cluster network
network is 1130 Microsoft-Windows- Warning Manual
is down.
down FailoverClustering
Cluster network
name resource
cannot be
brought online.
Cluster
Based on event The computer
resource
1207 Microsoft-Windows- Error Manual object
cannot be
FailoverClustering associated with
brought online
the resource
could not be
updated in
domain.
Cluster resource
Based on event in clustered
Cluster
1069 Microsoft-Windows- Error Manual service or
resource failure
FailoverClustering application has
failed.
The Cluster
service cannot
be started. An
Cluster service Based on event
attempt to read
cannot be 1090 Microsoft-Windows- Error Manual
configuration
started FailoverClustering
data from the
Windows
registry failed.
The Cluster
service failed to
Based on event start because it
Cluster service
1105 Microsoft-Windows- Error Manual was unable to
failed to start
FailoverClustering register
interface(s) with
the RPC service.
Cluster service
could not write
to a file. In a
failover cluster,
most clustered
services or
applications use
at least one disk,
also called a disk
resource, that
Cluster service Based on event
you assign when
failed to write 1080 Microsoft-Windows- Warning Manual
you configure
data to a file FailoverClustering
the clustered
service or
application.
Clients can use
the clustered
service or
application only
when the disk is
functioning
correctly.
Cluster service
Based on event
Cluster service suffered an
1000 Microsoft-Windows- Error Manual
fatal error unexpected fatal
FailoverClustering
error.
Cluster service
was halted due
Based on event
Cluster service to incomplete
1006 Microsoft-Windows- Error Manual
interruption connectivity
FailoverClustering
with other
cluster nodes.
The Cluster
Based on event service is
Cluster service
1177 Microsoft-Windows- Error Manual shutting down
shut down
FailoverClustering because quorum
was lost.
Based on event Cluster Shared
5120 Microsoft-Windows- Warning Volume is no
FailoverClustering longer available
on this node. All
Cluster Shared
I/O will
Volume is not Automatic
Based on event temporarily be
available
5122 Microsoft-Windows- Resolve queued until a
FailoverClustering path to the
volume is
reestablished.
Cluster Shared Based on event Cluster Shared
Volume is not 5121 Microsoft-Windows- Warning Automatic Volume is no
directly FailoverClustering longer directly
Cluster IP
address resource
Invalid IP Based on event cannot be
address 1047 Microsoft-Windows- Error Manual brought online
detected FailoverClustering because the
address value is
invalid.
Invalid IP Cluster IP
Based on event
address for address resource
1360 Microsoft-Windows- Error Manual
cluster failed to come
FailoverClustering
resource online.
Cluster IP
address resource
Based on event cannot be
Invalid subnet
1046 Microsoft-Windows- Error Manual brought online
mask detected
FailoverClustering because the
subnet mask
value is invalid.
The cluster
service
Unexpected Based on event
encountered an
cluster service 1556 Microsoft-Windows- Error Manual
unexpected
problem FailoverClustering
problem and will
be shut down.
Resolve
Alarm Name Event/Condition Severity Description
Action
Resolve
Alarm Name Event/Condition Severity Description
Action
Resolve
Alarm Name Event/Condition Severity Description
Action
The Hyper-V
Virtual Machine
Failed to Management
Based on event
register VM service failed to
20100 Microsoft-Windows-Hyper-V- Warning Manual
configuration register the
VMMS
file configuration
for the virtual
machine.
The Hyper-V
Virtual Machine
Failed to Management
Based on event
unregister VM service failed to
20102 Microsoft-Windows-Hyper-V- Warning Manual
configuration unregister the
VMMS
file configuration
for the virtual
machine.
The Hyper-V
Virtual Machine
Management
Failed to verify
Based on event service failed to
VM
20104 Microsoft-Windows-Hyper-V- Warning Manual verify that the
configuration
VMMS configuration is
file
registered for
the virtual
machine.
Failed to revert
to VSS snapshot
Based on event
Failed to revert on one or more
10104 Microsoft-Windows-Hyper-V- Error Manual
to VSS snapshot virtual hard
VMMS
disks of the
virtual machine.
Based on event
12290 Microsoft-Windows-Hyper-V-
Worker
Based on event
12290 Microsoft-Windows-Hyper-V-
SynthStor
Based on event
12290 Microsoft-Windows-Hyper-V-
VMMS
Based on event
12140 Microsoft-Windows-Hyper-V-
VMMS
Based on event
Failed to open Cannot open
12140 Microsoft-Windows-Hyper-V- Error Manual
VM attachment VM attachment.
Worker
Based on event
12140 Microsoft-Windows-Hyper-V-
SynthStor
Based on event
12240 Microsoft-Windows-Hyper-V-
VMMS
Based on event
12240 Microsoft-Windows-Hyper-V-
Worker
Based on event
12240 Microsoft-Windows-Hyper-V-
SynthStor
Failed to load Based on event Cannot load a
VM 16300 Microsoft-Windows-Hyper-V- Error Manual virtual machine
configuration VMMS configuration.
Cannot load the
VM Based on event virtual machine
configuration 16310 Microsoft-Windows-Hyper-V- Error Manual because the
file is corrupt VMMS configuration is
corrupt.
Cluster Shared
Volume is no
Cluster Shared
Based on event longer
Volume is no
5142 Microsoft-Windows- Error Manual accessible from
longer
FailoverClustering this cluster
accessible
node because
of error.
Based on event
Error Veeam ONE
VeeamBpPerfCollectionFailedEvent
Backup failed to collect
Based on event
performance Resolve performance
VeeamMonitorServicesStartedEvent
data collection data from the
failure Based on event specified
VeeamBpPerfCollectionFailedResolved Resolve backup server.
Event
Based on event
Error Veeam ONE
VeeamNoHostConnectionEvent
failed to collect
Backup server Based on event
data from a
data collection VeeamNoHostConnectionResolvedEve Resolve
Veeam Backup
problem nt
& Replication
Based on event server.
Resolve
VeeamMonitorServicesStartedEvent
Based on event
Warning Veeam ONE
VeeamDPCacheEvent
failed to write
Based on event
Disk cache error Resolve performance
VeeamDPCacheResolvedEvent
data to the disk
Based on event cache folder.
Resolve
VeeamMonitorServicesStartedEvent
Based on event
Error Veeam ONE
VeeamEventCollectionFailedEvent
failed to collect
Events data Based on event
events data
collection VeeamEventCollectionFailedResolvedE Resolve
from the
failure vent
objects
Based on event specified.
Resolve
VeeamMonitorServicesStartedEvent
Based on event
VeeamHardwareSensorsCollectionEve Error
Hardware nt Veeam ONE
sensors Based on event failed to collect
collection VeeamHardwareSensorsCollectionRes Resolve host hardware
failure olvedEvent information.
Based on event
Resolve
VeeamMonitorServicesStartedEvent
Based on event
Error Veeam ONE
VeeamPerfCollectionFailedEvent
failed to collect
Performance Based on event
performance
data collection VeeamPerfCollectionFailedResolvedEv Resolve
data from the
failure ent
objects
Based on event specified.
Resolve
VeeamMonitorServicesStartedEvent
Based on event Veeam ONE
Warning
VeeamSqlLowDbFreeSpaceEvent database size is
Based on event close to
SQL Server
VeeamSqlLowDbFreeSpaceResolvedEv Resolve maximum
Express
ent database size
database size
supported by
Based on event SQL Server
Resolve
VeeamMonitorServicesStartedEvent Express Edition.
Based on event
Error
VeeamInfCollectionFailedEvent
Veeam ONE
Topology Based on event
failed to collect
collection VeeamInfCollectionFailedResolvedEve Resolve
infrastructure
failure nt
topology.
Based on event
Resolve
VeeamMonitorServicesStartedEvent
Based on event
VeeamVcdBlockingTaskUpdateFailedE Error Veeam ONE
vCloud Director vent failed to update
blocking tasks vCloud Director
Based on event blocking tasks
update failure
VeeamVcdBlockingTaskUpdateFailedR Resolve list.
esolvedEvent
Based on event Veeam ONE
Error
VeeamNoVcdHostConnectionEvent failed to collect
vCloud Director Based on event performance
connection VeeamNoVcdHostConnectionResolved Resolve and
failure Event configuration
Based on event data from
Resolve vCloud Director.
VeeamMonitorServicesStartedEvent
Based on event
VeeamVcdStrandedItemUpdateFailedE Error Veeam ONE
vCloud Director vent failed to update
stranded items vCloud Director
Based on event stranded items
update failure
VeeamVcdStrandedItemUpdateFailed Resolve list.
ResolvedEvent
Based on event
Warning
VeeamLicenseExpirationWarningEvent
Based on event
Error
VeeamLicenseExpirationErrorEvent
Veeam ONE Based on event Veeam ONE
Resolve
license VeeamLicenseChangedEvent license is going
expiration date Based on event to expire soon.
VeeamLicenseExpirationResolvedEven Resolve
t
Based on event
Resolve
VeeamMonitorServicesStartedEvent
Based on event
Error
VeeamSocketExceedEvent The number of
Veeam ONE
Based on event licensed servers
license sockets Resolve
VeeamSocketExceedResolvedEvent has been
exceeded
Based on event exceeded.
Resolve
VeeamMonitorServicesStartedEvent
Based on event License update
Veeam ONE Warning
VeeamLicenseUpdateErrorEvent failure can take
license update
Based on event place for a
failure Resolve
VeeamLicenseUpdateResolvedEvent number of
vCenter Server
Rule Type Description
Existing alarm An alarm is triggered if the state of another selected alarm is changed.
Cluster
Rule Type Description
Existing alarm An alarm is triggered if the state of another selected alarm is changed.
Resource usage is out of An alarm is triggered if the specified counter is above or below the specified
allowed range threshold value (for example, if the memory usage exceeds 80%).
Hardware sensor state An alarm is triggered if the sensor state reports to be equal or not equal to a
changes specific state value (Normal, Warning, Alert, Unknown).
Existing alarm An alarm is triggered if the state of another selected alarm is changed.
Power or connection state An alarm is triggered if the host state reports to be equal or not equal to a
changes specific state value (for example, if the ESX(i) host is not responding).
Resource usage is out of An alarm is triggered if the specified counter is above or below the specified
allowed range threshold value (for example, if the CPU usage exceeds 75%).
Virtual Machine
Rule Type Description
Orphaned Veeam Backup & An alarm is triggered if a VM has a snapshot that Veeam Backup & Replication
Replication snapshot has created (to back up, replicate or perform another data protection operation for
been detected the VM) but was unable to remove when the operation was over.
Existing alarm An alarm is triggered if the state of another selected alarm is changed.
Power or connection state An alarm is triggered if the state of the VM reports to be equal or not equal to
changes the specified state value (for example, if the VM is suspended).
Resource usage is out of An alarm is triggered if the specified counter is above or below the specified
allowed range value (for example, if the CPU ready level exceeds 5%).
Snapshot age for VM has An alarm is triggered if the current snapshot is older than a specified number
exceeded the configured of hours. This rule helps monitor forgotten snapshots that are consuming
threshold valuable storage space and degrading performance of virtual machines.
An alarm is triggered if the age of the latest backup or replica restore point for
VMs with no restore points the VM has exceeded the threshold (that is, if there are no restore points for
the specified RPO period).
Datastore
Rule Type Description
Existing alarm An alarm is triggered if the state of another selected alarm is changed.
Resource usage is out of An alarm is triggered if the specified counter is above or below the specified
allowed range threshold value (for example, if the datastore I\O threshold is violated).
Any Object
Rule Type Description
Existing alarm An alarm is triggered if the state of another selected alarm is changed.
Existing alarm An alarm is triggered if the state of another selected alarm is changed.
Resource usage is out of An alarm is triggered if the specified counter is above or below the specified
allowed range value (for example, if the storage usage exceeds 80%).
vCloud Director object task An alarm is triggered if the vApp state reports to be equal or not equal to a
status specific state value (for example, if warnings are registered for the vApp).
System health status change An alarm is triggered if the object health state changes.
vApp runtime lease timeout An alarm is triggered in N days after the vApp runtime lease has expired.
vApp storage lease timeout An alarm is triggered in N days after the vApp storage lease has expired.
Existing alarm An alarm is triggered if the state of another selected alarm is changed.
Organization VCD blocking An alarm is triggered if the number of pending blocking tasks has exceeded
task number the specified threshold.
System health state change An alarm is triggered if the object health state changes.
Event-based rule An alarm is triggered if some event is generated on the organization VCD.
Existing alarm An alarm is triggered if the state of another selected alarm is changed.
Resource usage is out of An alarm is triggered if the specified counter is above or below the specified
allowed range value (for example, if the CPU ready level exceeds 5%).
System health status change An alarm is triggered if the object health state changes.
Event-based rule An alarm is triggered if some event is generated on the provider VCD.
Existing alarm An alarm is triggered if the state of another selected alarm is changed.
Resource usage is out of An alarm is triggered if the specified counter is above or below the specified
allowed range value (for example, if the storage usage exceeds 80%).
An alarm is triggered if the provider VCD state reports to be equal or not equal
vCloud Director object task
to a specific state value (for example, if warnings are registered for the
status
provider VCD).
System health status change An alarm is triggered if the object health state changes.
Resource Pool
Rule Type Description
Existing alarm An alarm is triggered if the state of another selected alarm is changed.
Resource usage is out of An alarm is triggered if the specified counter is above or below the specified
allowed range value (for example, if the CPU usage exceeds 80%).
Host
Rule Type Description
Virtual Machine
Rule Type Description
Cluster
Rule Type Description
Local Storage
Rule Type Description
Any Object
Rule Type Description
Enterprise Manager
Rule Type Description
Backup Server
Rule Type Description
Job duration exceeded the allowed An alarm is triggered if duration of a backup or replication job has
time period exceeded a threshold duration value (specified in minutes).
Proxy
Rule Type Description
WAN Accelerator
Rule Type Description
Cloud Repository
Rule Type Description
Cloud Gateway
Rule Type Description