Working with ESX(i) log files is important when troubleshooting issues within the virtual environment. So which information is stored where? Below is a list of the log files and what they contain. Note that all of them are located in /var/log.
| auth.log | ESXi Shell authentication success and failure |
| dhclient.log | DHCP Client logs |
| esxupdate.log | ESXi patches and update installation logs |
| hostd.log | Host management service logs, including VM and host tasks and evens, vpxa related events. |
| shell.log | ESXi shell usage (history of all commands run on the command line) |
| sysboot.log | VMkernel startup and module loading |
| boot.gz | Boot log information. Read this via zcat command. |
| syslog.log | Management service initialization, DCUI use, scheduled tasks. |
| usb.log | USB device arbitration events like discovery. |
| vob.log | VMkernel observation events |
| vmkernel.log | Core VMkernel logs, including storage and networking events, VM startup |
| vmkwarning.log | VMkernel warning and alert log messages |
| vmksummary.log | A summary of ESXi startup and shutdown. It also records hourly heartbeat with uptime, number of VMs running and service resource consumption. |