SDDC Manager VCF and Root User Security Log Location

[RealQuiet]

Does anyone know where SDDC Manager stores security logs for VCF or root logins (successes and failures)? 

I was able to find the UI logins under sddc-manager-ui-activity.log but cannot find security logs for SSH or using the console to log in with root/vcf accounts.

Any help would be appreciated. 

[Shen88]

@RealQuiet, Hey, may I know the VCF Version you've got and have you tried collecting the SoS Logs to find that information?

[RealQuiet]

SDDC is on 4.5.2 and I have generated the SoS logs, which allowed me to query the logs when using the SDDC Manager UI. I

I am looking for the log name that will store login successes and failures when using SSH or the console access using the local vcf and/or root account. 

[HassanAlKak88]

as i know all VCF logs will be under the following directory "/var/log/vmware/vcf"

for your specific logs i will try to find something on my lab and will keep you posted.

meanwhile if you found something under that directory update me as well,

[HassanAlKak88]

would you please check the following:

/var/log/vmware/vcf/commonsvcs ]$ tail -f vcf-commonsvcs-activity.log