8.0

Table Of Contents
In ESXi 8.0, log files are written either directly, from a single service such as VMX, or indirectly,
when logs from a service are submitted to a syslog. For example, VMX always writes log messages
in the vmware.log file of each virtual machine. To spare system resources, VMX does not submit
log messages to the syslog. On the other hand, in some log files that vmsyslogd generates, you
see messages from multiple programs, because the ESXi syslog daemon creates and manages all
log files, and messages to these files, from multiple services.
Format for direct log messages:
Parameter Value
LOG-MSG
HEADER SP MSG
HEADER
TIMESTAMP SP SEVERITY SP THREAD-NAME SP OPID
TIMESTAMP
FULL-DATE T FULL-TIME (Complies to RFC 5424 with the requirement for UTC/GMT formatting
and resolution in milliseconds, or more granular where possible.)
FULL-DATE
DATE-FULLYEAR - DATE-MONTH - DATE-MDAY
DATE-FULLYEAR
4DIGIT
DATE-MONTH
2DIGIT ; 01-12
DATE-MDAY
2DIGIT ; 01-28, 01-29, 01-30, 01-31 based on month/year
FULL-TIME
TIME-HOUR : TIME-MINUTE : TIME-SECOND[TIME-SECFRAC] Z
TIME-HOUR
2DIGIT ; 00-23
TIME-MINUTE
2DIGIT ; 00-59
TIME-SECOND
2DIGIT ; 00-59
TIME-SECFRAC
'.' 1*6DIGIT
SEVERITY
SEVERITY-STRING SEVERITY-VALUE [LINE-MARKER]
SEVERITY-STRING
Em/ Al / Cr / Er / Wa / No / In / Db (The 8 severity levels specified in RFC 5424 are abbreviated as
follows:
n Em - Emergency
n Al - Alert
n Cr - Critical
n Er - Error
n Wa - Warning
n No - Notice
n In - Informational
n Db - Debug
SEVERITY-VALUE
( *DIGIT ) (The SEVERITY-VALUE is an optional expression of the numeric value associated with
the SEVERITY-STRING. This allows levels supported by a logger to be collapsed into the 8
required strings with no loss of information (e.g. Db(5) - debug, level 5).)
LINE-MARKER
+ (The LINE-MARKER is added to each subsequent line generated from a multi-line submission. It
identifies multiline submissions and prevents a log injection security attack.)
VMware ESXi Installation and Setup
VMware, Inc. 242