brain-dump/sysadmin/vmware/useful-log-locations.md

Useful VMware/vCenter Log Locations

vCenter has a ton of logs in /var/log on vCenter Server Server Appliance, these are the ones I find the most useful.

In order to search the logs directly, turn SSH on from VCSA:

• You must log in to https://vcenter.example.com:5480/ as administrator@vsphere.local and not your Active Directory user.

• Access > Edit > tick both Enable BASH Shell & Enable SSH Login

• Login: ssh root@vcenter.example.com

• Go into the shell by typing shell

Now you can parse the logs.

Authentication and Warning Logs

• /var/log/vmware/vpxd/vpxd.log
  • Find authentication logs: grep "username" /var/log/vmware/vpxd/vpxd.log
  • Locate errors or warnings: grep "error" /var/log/vmware/vpxd/vpxd.log

vCenter Server-related Issues

• /var/log/vmware/messages
  • Find warnings or errors grep "warning" /var/log/vmware/messages
  • Certificate issues: grep "cert" /var/log/vmware/messages

Turn off shell & SSH access when finished.