VMware vCenter ESX/ESXi Log

Server log (/var/log/hostd.log)
Server log (/var/log/vmkernal.log)
vCenter agent (log /var/log/vpxa.log)



Collecting diagnostic information using the vm-support command in VMware ESX/ESXi
#vm-support

Using any HTTP client, download the resource from:
#https://username:password@ESXHostnameOrIPAddress/cgi-bin/vm-support.cgi

To export the log bundle to a shared vmfs datastore, use this command:
#vm-support -f -w /vmfs/volumes/DATASTORE_NAME

Obtaining Diagnostic Information for ESXi 5.x hosts using the vSphere Client

1. Select an ESXi host, cluster, or datacenter in the inventory. 
2. Click the File > Export > Export System Logs.

Check the ESX/ESXi host for host hardware info by running following comman.
        #esxcfg-info | less -i

        # cat /proc/vmware/scsi/vmhba#/#:#        Note: The vmhba#/#:# represents the canonical name for the path.

        #esxcfg-scsidevs -l | egrep -i 'display name|vendor'        #lspci -vvv 


LogsforanESXi5.1hostaregroupedaccordingtothesourcecomponent:

# ls /var/log

• /var/log/auth.log: ESXi Shell authentication success and failure. 
• /var/log/dhclient.log: DHCP client service, including discovery, address lease requests and renewals.
• /var/log/esxupdate.log: ESXi patch and update installation logs.
• /var/log/lacp.log: Link Aggregation Control Protocol logs.
• /var/log/hostd.log: Hostmanagement service logs, including virtual machine and host Task and Events, communication with the vSphere Client and vCenter Server vpxa agent, and SDK connections.
• /var/log/hostd-probe.log: Host management service responsiveness checker.
• /var/log/rhttpproxy.log: HTTP connections proxied onbehalf of other ESXi host webservices.
• /var/log/shell.log: ESXi Shell usage logs, including enable /disable and every command entered.
• /var/log/sysboot.log: Early VMkernel startup and module loading.
• /var/log/boot.gz: A compressed file that contains boot log information and can be read using zcat /var/log/boot.gz | more.
• /var/log/syslog.log: Management service initialization, watchdogs, scheduled tasks and DCUI use.
• /var/log/usb.log: USB device arbitration events, such as discovery and pass-through to virtual machines.
• /var/log/vobd.log:VMkernelObservationevents,similartovob.component.event.
• /var/log/vmkernel.log: Core VMkernel logs, including device discovery, storage and networking device and driver events, and virtual machine startup.
• /var/log/vmkwarning.log: A summary of Warning and Alert log messages excerpted from the VMkernel logs.
• /var/log/vmksummary.log: A summary of ESXi host startup and shutdown, and an hourly heart beat with up time, number of virtual machines running, and service resource consumption. 
• /var/log/Xorg.log: Video acceleration.