6.7

Table Of Contents
The Downloading Log Bundles dialog box appears when the Generating Diagnostic Bundle task is
finished. The download status of each bundle appears in the dialog box.
Some network errors can cause download failures. When you select an individual download in the
dialog box, the error message for that operation appears under the name and location of the log
bundle file.
12 Verify the information in the Summary and click Finish to download the log files.
Diagnostic bundles containing log files for the specified objects are downloaded to the location specified.
What to do next
Upload Logs Package to a VMware Service Request.
ESXi Log Files
Log files are an important component of troubleshooting attacks and obtaining information about
breaches. Logging to a secure, centralized log server can help prevent log tampering. Remote logging
also provides a long-term audit record.
To increase the security of the host, take the following measures
n
Configure persistent logging to a datastore. By default, the logs on ESXi hosts are stored in the in-
memory file system. Therefore, they are lost when you reboot the host, and only 24 hours of log data
is stored. When you enable persistent logging, you have a dedicated activity record for the host.
n
Remote logging to a central host allows you to gather log files on a central host. From that host, you
can monitor all hosts with a single tool, do aggregate analysis, and search log data. This approach
facilitates monitoring and reveals information about coordinated attacks on multiple hosts.
n
Configure the remote secure syslog on ESXi hosts by using a CLI such as vCLI or PowerCLI, or by
using an API client.
n
Query the syslog configuration to make sure that the syslog server and port are valid.
See the vSphere Monitoring and Performance documentation for information about syslog setup, and for
additional information on ESXi log files.
Upload Logs Package to a VMware Service Request
If you already have a Service Request ID with VMware, you can use the vSphere Web Client to upload
the system log bundles directly to your service request.
Prerequisites
Request a Service Request ID from VMware Technical Support.
Procedure
1 In the vSphere Web Client, navigate to Administration.
vSphere Monitoring and Performance
VMware, Inc. 200