SDDC Manager VCF and Root User Security Log Locati...

RealQuiet · ‎09-15-2023

Does anyone know where SDDC Manager stores security logs for VCF or root logins (successes and failures)?

I was able to find the UI logins under sddc-manager-ui-activity.log but cannot find security logs for SSH or using the console to log in with root/vcf accounts.

Any help would be appreciated.

Shen88 · ‎09-16-2023

@RealQuiet, Hey, may I know the VCF Version you've got and have you tried collecting the SoS Logs to find that information?

If you think your queries have been answered, Mark this response as "Correct" or "Helpful" and consider giving kudos to appreciate!

Regards,
Shen

RealQuiet · ‎09-18-2023

SDDC is on 4.5.2 and I have generated the SoS logs, which allowed me to query the logs when using the SDDC Manager UI. I

I am looking for the log name that will store login successes and failures when using SSH or the console access using the local vcf and/or root account.

HassanAlKak88 · ‎09-20-2023

as i know all VCF logs will be under the following directory "/var/log/vmware/vcf"

for your specific logs i will try to find something on my lab and will keep you posted.

meanwhile if you found something under that directory update me as well,

If my reply was helpful, I kindly ask you to like it and mark it as a solution

Regards,
Hassan Alkak

HassanAlKak88 · ‎09-20-2023

would you please check the following:

/var/log/vmware/vcf/commonsvcs ]$ tail -f vcf-commonsvcs-activity.log

If my reply was helpful, I kindly ask you to like it and mark it as a solution

Regards,
Hassan Alkak

SDDC Manager VCF and Root User Security Log Location