Troubleshooting a VxRail environment often starts with knowing where to look. VxRail 8.0 builds on the existing architecture but introduces a few changes in file locations, log collection practices, and the way system events are reported.

The following log files can be accessed through either the console or by using SSH to connect to the VxRail Manager appliance.

  • Check the SLES operating system version used by VxRail Manager:
    cat /etc/os-release
  • Check the currently installed VxRail version:
    rpm -qa | grep vxrail

Monitor VxRail Bring-Up Logs

The bring-up process logs key stages of initial configuration and microservice initialization. The most relevant files include:

  • dayone.log – Provides detailed information about the initial first-run configuration.
    Location: /var/log/microservice_log/dayone.log
  • short.term.log – Contains operational details about the VxRail microservices.
    Location: /var/log/microservice_log/short.term.log
  • firstboot.log – Captures microservice boot-up details during the initial VxRail configuration sequence.
    Location: /var/log/firstboot.log

Example: Querying dayone.log

To review and monitor the dayone.log file, navigate to the microservice log directory:

cd /var/log/microservice_log/

Common commands for working with dayone.log:

# cat dayone.log
# tail -f dayone.log
# tail -f dayone.log | grep ERROR
# tail -n 100 dayone.log
# more dayone.log

Note: short.term.log is an excellent starting point when investigating microservices-related activity. To drill down into a specific microservice, simply filter the log by the microservice name. For example:

  • cat short.term.log | grep microservice.do-vxrail
  • cat short.term.log | grep microservice.do-host
  • cat short.term.log | grep microservice.do-cluster
  • cat short.term.log | grep microservice.do-network
  • cat short.term.log | grep microservice.do-vm
  • cat short.term.log | grep microservice.do-ecosystem
  • cat short.term.log | grep microservice.do-eservices
  • cat short.term.log | grep microservice.do-storage

List all microservices and check their status:

Purpose / DescriptionCommand
List all pods (microservices) in the default namespacekubectl get pods
List all pods across all namespaceskubectl get pods -A
List pods with detailed informationkubectl get pods -o wide
List all deploymentskubectl get deploy
List deployments with detailed informationkubectl get deploy -o wide
Check the status of all nodes in the clusterkubectl get nodes

General VxRail Manager Log Files

Below is a list of commonly referenced VxRail log files and what they are used for:

Log FileDescription
/var/log/vmware/marvin/tomcat/logs/marvin.logTracks expansion-related activities such as node additions.
/var/log/vmware/marvin/tomcat/logs/localhost_access_log.txtHTTP request logs, primarily from the VxRail vCenter plug-in.
/var/log/vmware/loudmouth/loudmouth.logHandles VxRail node discovery and communication.
/var/log/vmware/marvin/tomcat/logs/DellPTAgentResponse.logLogs PTAgent connectivity responses and issues.
/var/log/mystic/connectors-cluster.logCluster-level events: disk replace, health, shutdown events, LED control.
/var/log/mystic/connectors-market.logMarket catalog communication and updates.
/var/log/mystic/connectors-esrs.logSecure Remote Services (ESRS) connectivity logs.
/var/log/mystic/connectors-eservice.logSupport account info, composite bundle download, online chat, and knowledge/community interactions.
/var/log/mystic/web.logVxRail upgrade-related web service operations.
/var/log/mystic/lcm-do.logDO-related microservice activity during Lifecycle Management (LCM).
/var/log/mystic/lcm-web.logAdditional LCM upgrade workflow logs.
/var/log/mystic/lcm-migration.logLogs relating to OVA deployment or migration tasks during an upgrade sequence.

Useful Log Analysis Commands

Below are commonly used commands for reviewing and analyzing VxRail log files. These examples use marvin.log, but the same commands can be applied to any log file:

Purpose / DescriptionCommand
View the log interactively with scroll/searchless /var/log/vmware/marvin/tomcat/logs/marvin.log
Display the full contents of the logcat /var/log/vmware/marvin/tomcat/logs/marvin.log
Monitor the log in real timetail -f marvin.log
Monitor the log and filter for errorstail -f marvin.log | grep ERROR
Monitor the log with errors highlightedtail -f marvin.log | grep ERROR -color
Display the last 100 lines of the logtail -n 100 marvin.log
Browse the log one page at a timemore marvin.log
Show the shell command historyhistory
Check disk usage of the log directorydu -sh /var/log
Generate a full VxRail diagnostic log bundle/mystic/generateFullLogBundle

/var is Running Low on Space: If the /var partition on the VxRail Manager appliance begins to run low on available space, you can identify usage and safely clear unnecessary log files. Check available space on VxRail manager with command “df -h”. Clear files under /var/log/microservice_log as needed:

StepPurpose / DescriptionCommand
1Check total disk usage of the log directorydu -sh /var/log
2List files in the microservice log directory by modification timels -ltr /var/log/microservice_log
3Navigate to the microservice log directorycd /var/log/microservice_log
4Remove old backup short-term logsrm short.term.log_bak*.log
5Remove old backup long-term logsrm long.term_bak*.log
6Remove old backup dayone logsrm dayone_bak*.log

Find Log or Configuration Files:

Purpose / DescriptionCommand
Find the location of a specific log file, e.g., marvin.logfind /* -name marvin.log
Find all cluster-related log filesfind /* -name *cluster.log
Find the configuration file config-initial.json (case-insensitive)find / -iname config-initial.json

Lookup Event Codes:

psql -U postgres vxrail -c "SELECT * FROM serviceability.event_code ;"

psql -U postgres vxrail -c "SELECT * FROM serviceability.event_code ;" | grep MYSTIC010011

JSON: cat /var/lib/vmware-marvin/config-initial.json | json_pp

Manifest File: cat /var/lib/vmware-marvin/manifest.xml

Application Properties: cat /usr/lib/vmware-marvin/marvind/webapps/ROOT/WEB-INF/classes/application.properties

Confirm DNS entries in resolv.conf & DB: cat /etc/resolv.conf

NTP Validation (Returns 0): timeout 2 bash -c "</dev/udp/10.104.0.254/123"; echo $?

In terms of viewing a “Configuration complete!” equivalent message in the logs the string is :
cd /var/log/microservice_log

# cat dayone.log | grep "notify {'level': 'workflow', 'state': 'COMPLETED', 'progress': 100}"

RADAR VERSION: /mystic/radar/radar --version

Transfer Log Files via SCP (example):
scp ./marvin.log.log ringd@10.10.0.10:/users/ringd/logs/

Using DU cmd to search for specific log files:

du -a -h / |grep dayone |grep log

du -a /var/log/ | sort -n -r | head -n 5

Collecting VxRail Manager logs using command line:

/mystic/generateLogBundle.py -v

The path of the log collection is printed on the screen:

ESXi Useful commands

Below are commonly used commands for checking ESXi host status, logs, networking, storage, and vSAN configuration within a VxRail environment.

Purpose / DescriptionCommand
Monitor the ESXi kernel log in real timetail -f /var/log/vmkernel.log
Verify installed VxRail-related VIBsesxcli software vib list | grep vxutils
Display ESXi and VMware build versionsvmware -vl
Check filesystem usage on the ESXi hostvdf -h
Display vSAN disk group and disk health informationvdq -qH
List VMkernel network interfacesesxcfg-vmknic -l
Display vSAN network configurationesxcli vsan network list
Show IPv4 configuration for VMkernel interfacesesxcli network ip interface ipv4 get
List virtual switch configurationesxcfg-vswitch -l

vCenter Log Monitoring

Purpose / DescriptionCommand
Monitor the vCenter Server log in real timetail -f /var/log/vmware/vpxd/vpxd.log



If VxRail Deployment Wizard fails to load or Vmware marvin service fails to start:

journalctl -xeu vmware-marvin.service

On the vxrail manager in /var/log/messages there are events indicating a duplicate IPv6 address is detected & kubernates fails to deploy:

cat /var/log/messages | grep "IPv6 duplicate address"

systemctl status runjars.service

systemctl status vmware-marvin.service

Modify the IPV6 address:

vi /etc/sysconfig/network/ifcfg-eth0

IPADDR0=’fd39:3939:3939:3939::180

Save & exit :wq!

systemctl restart network

Reboot VXRM.

After ~10 minutes check that kubernates “helium” pods havd been deployed:

  • kubectl get pods
  • kubectl get pods -A
  • kubectl get pods -o wide
  • kubectl get deployments

Confirm services are active or start if not:

systemctl status runjars.service
systemctl status vmware-marvin.service
systemctl start vmware-marvin
systemctl start runjars

Leave a comment