Windows OS vm reported as offline in SQL Sentry and Splunk

Products

• VMware vSphere ESX 7.x
• VMware vSphere ESX 8.x

Issue/Introduction

SQL Sentry and Splunk alerts indicating that a vm was offline.

VMware logs don't indicate any issue with the vm.

Splunk alert similar to:

[Monitor Type]:  EventHistoryMonitor

[Condition]:  SQL Server: Offline

Environment

ESXi 7.x

ESXi 8.x

Cause

Advanced setting in network adapter configuration "Allow the computer to turn off this device to save power" is enabled

 

Resolution

Disable this setting on the vm or extend the response ruleset threshold for these events in the monitoring software.