ESX Host Shutdown auditing

[Aljarrah]

Hello,

We are running ESXi 6.5 (VM version 13) cluster with 2 nodes , HA is configured between the 2 host machines.

Few days ago , one of the ESX hosts went down without any apparent reason except for some logs which I am sharing below.

Hosted Windows machines have shown the usual "last shutdown was unexpected".

vSphare logs didn't show a clear reason behind this issue.

Is there a way to tell why this host machine went down?

Kindly advise

Regards

[NathanosBlightc]

Hi, Please check these following log files in the /var/log path in the SSH/Shell access on the ESXi host. Search for any related events in time interval of that failure:

vmkernel.log , vmksummary.log

[Aljarrah]

Thank you , you think this log file will contain information not present under the vSphere event section?

[NathanosBlightc]

Your attached screens are showing the Cluster object's event section, I think it's better to check the ESXi host event log details.

[Aljarrah]

Hello,

You mean they are different?

Is there a GUI interface to those host log files?

Regards

[NathanosBlightc]

If it's hard for you to investigate the log files in the CLI environment and want to search in a GUI environment, you can download them by tools like WinSCP and open in any editor app and search for related errors, warning or etc. Or you can copy them to the datastore path with the following command in shell and download via browsing the datastore.

cp /var/log/*.log /vmfs/volumes/datastore1/temp/

[Aljarrah]

Sure , and you mean that the information contained in the log files are different from that displayed by vCenter. right?

[NathanosBlightc]

By investigation of exactly log files, you have more details about everything that happened into your ESXi host.