topic Re: SDDC Manager VCF and Root User Security Log Location in VMware Cloud Foundation Discussions

SDDC Manager VCF and Root User Security Log Location

RealQuiet — Sat, 16 Sep 2023 00:49:10 GMT

Does anyone know where SDDC Manager stores security logs for VCF or root logins (successes and failures)?

I was able to find the UI logins under sddc-manager-ui-activity.log but cannot find security logs for SSH or using the console to log in with root/vcf accounts.

Any help would be appreciated.

Re: SDDC Manager VCF and Root User Security Log Location

Shen88 — Sat, 16 Sep 2023 07:50:29 GMT

@RealQuiet, Hey, may I know the VCF Version you've got and have you tried collecting the SoS Logs to find that information?

Re: SDDC Manager VCF and Root User Security Log Location

RealQuiet — Mon, 18 Sep 2023 13:55:54 GMT

SDDC is on 4.5.2 and I have generated the SoS logs, which allowed me to query the logs when using the SDDC Manager UI. I

I am looking for the log name that will store login successes and failures when using SSH or the console access using the local vcf and/or root account.

Re: SDDC Manager VCF and Root User Security Log Location

HassanAlKak88 — Wed, 20 Sep 2023 09:39:38 GMT

as i know all VCF logs will be under the following directory "/var/log/vmware/vcf"

for your specific logs i will try to find something on my lab and will keep you posted.

meanwhile if you found something under that directory update me as well,

Re: SDDC Manager VCF and Root User Security Log Location

HassanAlKak88 — Wed, 20 Sep 2023 09:53:49 GMT

would you please check the following:

/var/log/vmware/vcf/commonsvcs ]$ tail -f vcf-commonsvcs-activity.log