I have been working on a script to pull the vCenter tasks and events through PowerCLI with the "Get-VIEvent" commands and noticed something strange going on. For some reason I have a service account that I use for vCenter and other things in the environment like View trying to log into vCenter several hundred times a minute but failing. When I pull the events with Get-VIEvent I see this account failing to login because the account is already logged on. My environment is working fine and I am not sure where the service account is trying to logon from or why this is happening. Has anyone seen similar behavior before or know why it would be doing this?
I also noticed in my Splunk logs from one of my domain controllers that the same account is authenticating several hundred times a minute also. I am not sure if that is related to the events I see with the vCenter tasks.