Working with ESX(i) log files is important when troubleshooting issues within the virtual environment. So which information is stored where? Below is a list of the log files and what they contain. Note that all of them are located in /var/log.
auth.log | ESXi Shell authentication success and failure |
dhclient.log | DHCP Client logs |
esxupdate.log | ESXi patches and update installation logs |
hostd.log | Host management service logs, including VM and host tasks and evens, vpxa related events. |
shell.log | ESXi shell usage (history of all commands run on the command line) |
sysboot.log | VMkernel startup and module loading |
boot.gz | Boot log information. Read this via zcat command. |
syslog.log | Management service initialization, DCUI use, scheduled tasks. |
usb.log | USB device arbitration events like discovery. |
vob.log | VMkernel observation events |
vmkernel.log | Core VMkernel logs, including storage and networking events, VM startup |
vmkwarning.log | VMkernel warning and alert log messages |
vmksummary.log | A summary of ESXi startup and shutdown. It also records hourly heartbeat with uptime, number of VMs running and service resource consumption. |