VMware Cloud Community
onsik
Contributor
Contributor

esxcli - deleted VM

HI

Is is possible to find out via esxcli who deleted the VM ? Consider that it must be done by reviewing the logs, no access to vcenter.

I have recently taken VCAP 6.0 deploy exam and I struggle with that question.

Thanks in advance

Onsik

0 Kudos
3 Replies
daphnissov
Immortal
Immortal

Not using esxcli but you could probably through the ESXi logs.

0 Kudos
onsik
Contributor
Contributor

aha, so I guess to check vmkernel.log ?

0 Kudos
daphnissov
Immortal
Immortal

You can check, although I don't know for certain it'll be logged there.

0 Kudos