Knowledge Base

Logs on an ESXi host can be reviewed from:

• The Direct Console User Interface (DCUI) option View System Logs. For more information, see the System Log Files section of the Datacenter Administration Guide.
  
  
• The vSphere Client or Infrastructure Client connected directly to the ESXi host. Select System Logs under Administration.
  
  
• Using PowerCLI. For more information, see Collecting diagnostic information for VMware vSphere vCenter Server and ESX/ESXi using the vSphere PowerCLI (1027932).
  
  
• Using a web browser at https://<HostnameOrIPAddress>/host. For more information, see the HTTP Access to vSphere Server Files section of the vSphere Web Services SDK documentation.
  
  
• Within an extracted vm-support log bundle. For more information, see Collecting diagnostic information for VMware ESX/ESXi using the vSphere Client (653) or Collecting diagnostic information for VMware ESX/ESXi using the vm-support command (1010705).
  
  
• Using the vifs command line utility in the vCLI. For more information, see the vSphere Command-Line Interface documentation.
  
  

ESXi 3.5 and 4.x Host Log Files

• /var/log/messages: Core VMkernel logs, including device discovery, storage and networking device and driver events, virtual machine startup, and a merged copy of the hostd and vpxa management service logs.
  
  Note: If it is desirable to remove hostd and vpxa management service logs from the combined messages log, see Disabling hostd and vpxa output to /var/log/messages in ESXi (1030672).
  
  
• /var/log/vmware/hostd.log: Host management service logs, including virtual machine and host Tasks and Events, communication with the vSphere Client and vCenter Server vpxa agent, and SDK connections.
  
  
• /var/log/sysboot.log: Early VMkernel startup, module loading, and host initialization.
  
  
• /var/log/esx_install.log: ESXi installation logs
  
  

Logs from vCenter Server Components on ESXi 3.5 and 4.x

When an ESX host is managed by vCenter Server or VirtualCenter Server, two components are installed, each with its own logs:

• /var/log/vmware/vpx/vpxa.log: vCenter Server vpxa agent logs, including communication with vCenter Server and the Host Management hostd agent.
  
  
• VMware High Availability logs, including HA cluster communication.
  
  
  • If managed by vCenter Server 4.1 or earlier: /var/log/vmware/aam/*

Note: if managed by vCenter Server 5.0 or later: /var/log/vmware/fdm/* .For more information on log files in ESXi 5.x, see Location of ESXi 5.0 log files (2004201).
  
  

Note: The logs on an ESXi host may be placed only on a ramdisk if there is no persistent scratch location or remote syslog server configured. Non-persistent logs will not be present following a reboot of the ESXi host, which may impair troubleshooting. VMware recommends configuring one or both of these options for persistent logging:

• Remote Syslog server: See the Configure Syslog on ESXi Hosts and the Basic vSphere Documentation.
• Scratch location: See Creating a persistent scratch location for ESXi (1033696).