Vsphere log location
ESXi Log File Locations
- //var/run/log/auth.log: ESXi Shell authentication success and failure. Could point to issues with the device connecting to the hypervisor.
- //var/run/log/dhclient.log: DHCP client service, including discovery, address lease requests and renewals. Unlikely this will be necessary to use unless a Virtual product is being set up with DHCP.
- //var/run/log/esxupdate.log: ESXi patch and update installation logs. May house information such as if a patch was applied to correct the CBT bug in 5.1 and 6.0.
- //var/run/log/hostd.log: Host management service logs, including virtual machine and host Task and Events, communication with the vSphere Client and vCenter Server vpxa agent, and SDK connections. Could cover a variety of issues.
- //var/run/log/shell.log: ESXi Shell usage logs, including enable/disable and every command entered. For more information, see the Managing vSphere with Command-Line Interfaces section of the vSphere 5 Command Line documentation and Auditing ESXi Shell logins and commands in ESXi 5.x. Not likely needed.
- //var/run/log/sysboot.log: Early VMkernel startup and module loading.
- //var/run/log/syslog.log: Management service initialization, watchdogs, scheduled tasks and DCUI use. May cover multiple issues.
- //var/run/log/usb.log: USB device arbitration events, such as discovery and pass-through to virtual machines. Very unlikely we would need this.
- //var/run/log/vob.log: VMkernel Observation events, similar to vob.component.event. Covers events with SANs being used. Could possibly explain I/O issues.
- //var/run/log/vmkernel.log: Core VMkernel logs, including device discovery, storage and networking device and driver events, and virtual machine startup. As stated before, this covers multiple things for host specific issues, and is a good place to look.
- //var/run/log/vmkwarning.log: A summary of Warning and Alert log messages excerpted from the VMkernel logs. This is a good place to start as it removes all the informational entries.
- //var/run/log/vmksummary.log: A summary of ESXi host startup and shutdown, and an hourly heartbeat with uptime, number of virtual machines running, and service resource consumption.
| Component | Location | Purpose |
|---|---|---|
| Authentication | /var/log/auth.log | Contains all events related to authentication for the local system. |
| ESXi host agent log | /var/log/hostd.log | Contains information about the agent that manages and configures the ESXi host and its virtual machines. |
| Shell log | /var/log/shell.log | Contains a record of all commands typed into the ESXi Shell and shell events (for example, when the shell was enabled). |
| System messages | /var/log/syslog.log | Contains all general log messages and can be used for troubleshooting. This information was formerly located in the messages log file. |
| vCenter Server agent log | /var/log/vpxa.log | Contains information about the agent that communicates with vCenter Server (if the host is managed by vCenter Server). |
| Virtual machines | The same directory as the affected virtual machine's configuration files, named vmware.log and vmware*.log. For example, /vmfs/volumes/datastore/virtual machine/vwmare.log | Contains virtual machine power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations, machine clones, and so on. |
| VMkernel | /var/log/vmkernel.log | Records activities related to virtual machines and ESXi. |
| VMkernel summary | /var/log/vmksummary.log | Used to determine uptime and availability statistics for ESXi (comma separated). |
| VMkernel warnings | /var/log/vmkwarning.log | Records activities related to virtual machines. |
| Quick Boot | /var/log/loadESX.log | Contains all events related to restarting an ESXi host through Quick Boot. |
| Trusted infrastructure agent | /var/run/log/kmxa.log | Records activities related to the Client Service on the ESXi Trusted Host. |
| Key Provider Service | /var/run/log/kmxd.log | Records activities related to the vSphere Trust Authority Key Provider Service. |
| Attestation Service | /var/run/log/attestd.log | Records activities related to the vSphere Trust Authority Attestation Service. |
| ESX Token Service | /var/run/log/esxtokend.log | Records activities related to the vSphere Trust Authority ESX Token Service. |
| ESX API Forwarder | /var/run/log/esxapiadapter.log | Records activities related to the vSphere Trust Authority API forwarder. |
Vcenter Log location
vCenter Server 6.0 logs are located in the %ALLUSERSPROFILE%\VMWare\vCenterServer\logs folder.
vCenter Server Appliance 6.0 logs are located in the /var/log/vmware/ folder.
Center Server | vCenter Server Appliance | Description |
vmware-vpx\vpxd.log | vpxd/vpxd.log | The main vCenter Serverlog |
vmware-vpx\vpxd-profiler.log | vpxd/vpxd-profiler.log | Profile metrics for operations performed in vCenter Server |
vmware-vpx\vpxd-alert.log | vpxd/vpxd-alert.log | Non-fatal information logged about the vpxd process |
perfcharts\stats.log | perfcharts/stats.log | VMware Performance Charts |
eam\eam.log | eam/eam.log | VMware ESX Agent Manager |
invsvc | invsvc | VMware Inventory Service |
netdump | netdumper | VMware vSphere ESXi Dump Collector |
| vapi | vapi | VMware vAPI Endpoint |
| vmdird | vmdird | VMware Directory Service daemon |
| vmsyslogcollector | syslog | vSphere Syslog Collector |
| vmware-sps\sps.log | vmware-sps/sps.log | VMware vSphere Profile-Driven Storage Service |
| vpostgres | vpostgres | vFabric Postgres database service |
| vsphere-client | vsphere-client | VMware vSphere Web Client |
| vws | vws | VMware System and Hardware Health Manager |
workflow | workflow | VMware vCenter Workflow Manager |
| SSO | SSO | VMware Single Sign-On |
Comments
Post a Comment