Custom alarm specific to User login in vCenter Server

Products

• VMware vCenter Server

Issue/Introduction

• Configure a custom alarm definition to monitor successful login events for specific administrative or project-related accounts.
• This functionality provides real-time visibility and automated email alerts whenever a designated user accesses the vSphere environment.
• This process is essential for security auditing, project tracking, and monitoring administrative access within VMware vSphere.

Environment

• VMware vCenter Server 

Resolution

To monitor a specific account login, implement the following configuration within the vSphere Client:

1. Log in to the vSphere Client.
2. Select the vCenter Server object at the top of the inventory tree.
3. Navigate to the Configure tab and select Alarm Definitions.
4. Click Add to open the creation wizard.
5. In the Name and Targets section, enter a descriptive name (e.g., "Monitor Account Login") and select vCenter Server as the target type.
6. In the Alarm Rule section, configure the following:
   1. Select a trigger: Set to User login.
   2. Add Argument/Condition: Click to add a filter: Argument: Select User Name Operator: Select is equal to Value: Enter the exact account name (e.g., domain.local\administrator).
   3. Under the Actions section, enable Send email notifications and enter the target SMTP recipient address. (Refer to following article for instructions on Setting Up Email Notifications for Alarms generated in vCenter Server.) 
   4. Review the settings, ensure the alarm is toggled to Enable, and click Create.
   5. Perform a logout and login cycle with the target account to verify the alarm triggers in the vCenter Summary tab and generates the email notification.

 

Additional Information

• For general alarm management guidance, see Create or Edit Alarms in the Broadcom Techdocs.
• To receive updates on this workflow or related troubleshooting steps, subscribe to the article per the instructions in How to subscribe to a Broadcom Knowledge Article. 
• Contact Broadcom Support.