Menu Close

VMware troubleshooting – All log types

vCenter Server Events

  1. With the vSphere client connected to the vCenter Server, click File > Export > Export Events.
  2. Ensure the type User is selected.
  3. Choose a time range using the From and To dropdowns.

Obtaining Diagnostic Information for ESXi 5.x and 6.x hosts

using the vSphere Client

  1. Open the vSphere Client and connect to vCenter Server or directly to an ESXi 5.x host.
  2. Select an ESXi host, cluster, or datacenter in the inventory.
  3. Click the File > Export > Export System Logs.
  4. If a group of ESXi hosts are available in the selected context, select the host or group of hosts from the Source list.
  5. In the System Logs pane, select the components for which the diagnostic information must be obtained. To collect diagnostic information for all the components, click Select All.
  6. If required, select the Gather performance data option and specify a duration and interval.
  7. In the Download Location pane, click Browse and select a location on the client’s disk where you have to save the support bundle.

using the vSphere Web Client

  1. Open the vSphere Web Client.
  2. Select Hosts and Clusters from the Home tab.
  3. Select an ESXi host, or vCenter in the inventory.
  4. Click Actions.
  5. Select All vCenter Actions > Export System Logs…
  6. If a group of ESXi hosts are available in the selected context, select the host or group of hosts from the Source list.
  7. In the System Logs pane, select the components for which the diagnostic information must be obtained. To collect diagnostic information for all the components, click Select All.
  8. If required, select the Gather performance data option and specify a duration and interval.
  9. Click Generate Log Bundle.
  10. Click Download Log Bundle.

vCenter logs

5.5 and earlier
vCenter Server 5.x and earlier versions on Windows XP, 2000, 2003: %ALLUSERSPROFILE%\Application Data\VMware\VMware VirtualCenter\Logs\
vCenter Server 5.x and earlier versions on Windows Vista, 7, 2008: C:\ProgramData\VMware\VMware VirtualCenter\Logs\
vCenter Server Appliance 5.x: /var/log/vmware/vpx/
vCenter Server Appliance 5.x UI: /var/log/vmware/vami
6.0 and after
The VMware vCenter Server 6.0 logs are located in the %ALLUSERSPROFILE%\VMWare\vCenterServer\logs
The VMware vCenter Server Appliance 6.0 logs are located in the /var/log/vmware/

VM logs (Vmware.log)

  • Archived log files are named vmware-#.log. The most recent archived version is named vmware-1.log
  • The vmware.log file is located in virtual machine folder along with the vmx file.
  • By default, ESXi/ESX hosts store virtual machine-specific logging in the same directory as the virtual machine’s configuration files. The default log file name is vmware.log.

ESXi Host log files

https://kb.vmware.com/s/article/2032076
/var/log/auth.log: ESXi Shell authentication success and failure.
/var/log/dhclient.log: DHCP client service, including discovery, address lease requests and renewals.
/var/log/esxupdate.log: ESXi patch and update installation logs.
/var/log/lacp.log: Link Aggregation Control Protocol logs.
/var/log/hostd.log: Host management service logs, including virtual machine and host Task and Events, communication with the vSphere Client and vCenter Server vpxa agent, and SDK connections.
/var/log/hostd-probe.log: Host management service responsiveness checker.
/var/log/rhttpproxy.log: HTTP connections proxied on behalf of other ESXi host webservices.
/var/log/shell.log: ESXi Shell usage logs, including enable/disable and every command entered. For more information, see vSphere 5.5 Command-Line Documentation and Auditing ESXi Shell logins and commands in ESXi 5.x (2004810).
/var/log/sysboot.log: Early VMkernel startup and module loading.
/var/log/boot.gz: A compressed file that contains boot log information and can be read using zcat /var/log/boot.gz|more.
/var/log/syslog.log: Management service initialization, watchdogs, scheduled tasks and DCUI use.
/var/log/usb.log: USB device arbitration events, such as discovery and pass-through to virtual machines.
/var/log/vobd.log: VMkernel Observation events, similar to vob.component.event.
/var/log/vmkernel.log: Core VMkernel logs, including device discovery, storage and networking device and driver events, and virtual machine startup.
/var/log/vmkwarning.log: A summary of Warning and Alert log messages excerpted from the VMkernel logs.
/var/log/vmksummary.log: A summary of ESXi host startup and shutdown, and an hourly heartbeat with uptime, number of virtual machines running, and service resource consumption. For more information, see Format of the ESXi 5.0 vmksummary log file (2004566).
/var/log/Xorg.log: Video acceleration.

Location of log files for VMware products (1021806)
https://kb.vmware.com/s/article/1021806

1 Comment

  1. Pingback:VMware vCenter 日志 - Primtech.org

Leave a Reply

Your email address will not be published. Required fields are marked *