26 minutes ago, Stuart Weenig said:You could create a config source to monitor the list of VMs on a particular server then alert whenever that list changes. That would at least give you an alert right when it happens, which could lead to correlation.
Is there a log entry that corresponds to the vmotion (i'm a network guy, so i just don't know what might be available). If there is, you could setup an event source to look for that log entry and open an alert when that happens.
would you have any sample config source list you could share? thank you
