Working with ESX(i) log files is important when troubleshooting issues within the virtual environment. So which information is stored where? Below is a list of the log files and what they contain. Note that all of them are located in /var/log.
| auth.log | ESXi Shell authentication success and failure | 
| dhclient.log | DHCP Client logs | 
| esxupdate.log | ESXi patches and update installation logs | 
| hostd.log | Host management service logs, including VM and host tasks and evens, vpxa related events. | 
| shell.log | ESXi shell usage (history of all commands run on the command line) | 
| sysboot.log | VMkernel startup and module loading | 
| boot.gz | Boot log information. Read this via zcat command. | 
| syslog.log | Management service initialization, DCUI use, scheduled tasks. | 
| usb.log | USB device arbitration events like discovery. | 
| vob.log | VMkernel observation events | 
| vmkernel.log | Core VMkernel logs, including storage and networking events, VM startup | 
| vmkwarning.log | VMkernel warning and alert log messages | 
| vmksummary.log | A summary of ESXi startup and shutdown. It also records hourly heartbeat with uptime, number of VMs running and service resource consumption. |