Forum Discussion
Anonymous
5 years agoYou could create a config source to monitor the list of VMs on a particular server then alert whenever that list changes. That would at least give you an alert right when it happens, which could lead to correlation.
Is there a log entry that corresponds to the vmotion (i'm a network guy, so i just don't know what might be available). If there is, you could setup an event source to look for that log entry and open an alert when that happens.