VxRail 8.0 – Useful Log File Information
Troubleshooting a VxRail environment often starts with knowing where to look. VxRail 8.0 builds on the existing architecture but introduces a few changes in file locations, log collection practices, and […]
Virtualization & Storage
Troubleshooting a VxRail environment often starts with knowing where to look. VxRail 8.0 builds on the existing architecture but introduces a few changes in file locations, log collection practices, and […]
Troubleshooting a VxRail environment often starts with knowing where to look. VxRail 8.0 builds on the existing architecture but introduces a few changes in file locations, log collection practices, and the way system events are reported.
The following log files can be accessed through either the console or by using SSH to connect to the VxRail Manager appliance.
cat /etc/os-releaserpm -qa | grep vxrailThe bring-up process logs key stages of initial configuration and microservice initialization. The most relevant files include:
/var/log/microservice_log/dayone.log/var/log/microservice_log/short.term.log/var/log/firstboot.logdayone.logTo review and monitor the dayone.log file, navigate to the microservice log directory:
cd /var/log/microservice_log/
Common commands for working with dayone.log:
# cat dayone.log
# tail -f dayone.log
# tail -f dayone.log | grep ERROR
# tail -n 100 dayone.log
# more dayone.log
Note: short.term.log is an excellent starting point when investigating microservices-related activity. To drill down into a specific microservice, simply filter the log by the microservice name. For example:
cat short.term.log | grep microservice.do-vxrailcat short.term.log | grep microservice.do-hostcat short.term.log | grep microservice.do-clustercat short.term.log | grep microservice.do-networkcat short.term.log | grep microservice.do-vmcat short.term.log | grep microservice.do-ecosystemcat short.term.log | grep microservice.do-eservicescat short.term.log | grep microservice.do-storageList all microservices and check their status:
| Purpose / Description | Command |
|---|---|
| List all pods (microservices) in the default namespace | kubectl get pods |
| List all pods across all namespaces | kubectl get pods -A |
| List pods with detailed information | kubectl get pods -o wide |
| List all deployments | kubectl get deploy |
| List deployments with detailed information | kubectl get deploy -o wide |
| Check the status of all nodes in the cluster | kubectl get nodes |
Below is a list of commonly referenced VxRail log files and what they are used for:
| Log File | Description |
|---|---|
| /var/log/vmware/marvin/tomcat/logs/marvin.log | Tracks expansion-related activities such as node additions. |
| /var/log/vmware/marvin/tomcat/logs/localhost_access_log.txt | HTTP request logs, primarily from the VxRail vCenter plug-in. |
| /var/log/vmware/loudmouth/loudmouth.log | Handles VxRail node discovery and communication. |
| /var/log/vmware/marvin/tomcat/logs/DellPTAgentResponse.log | Logs PTAgent connectivity responses and issues. |
| /var/log/mystic/connectors-cluster.log | Cluster-level events: disk replace, health, shutdown events, LED control. |
| /var/log/mystic/connectors-market.log | Market catalog communication and updates. |
| /var/log/mystic/connectors-esrs.log | Secure Remote Services (ESRS) connectivity logs. |
| /var/log/mystic/connectors-eservice.log | Support account info, composite bundle download, online chat, and knowledge/community interactions. |
| /var/log/mystic/web.log | VxRail upgrade-related web service operations. |
| /var/log/mystic/lcm-do.log | DO-related microservice activity during Lifecycle Management (LCM). |
| /var/log/mystic/lcm-web.log | Additional LCM upgrade workflow logs. |
| /var/log/mystic/lcm-migration.log | Logs relating to OVA deployment or migration tasks during an upgrade sequence. |
Below are commonly used commands for reviewing and analyzing VxRail log files. These examples use marvin.log, but the same commands can be applied to any log file:
| Purpose / Description | Command |
|---|---|
| View the log interactively with scroll/search | less /var/log/vmware/marvin/tomcat/logs/marvin.log |
| Display the full contents of the log | cat /var/log/vmware/marvin/tomcat/logs/marvin.log |
| Monitor the log in real time | tail -f marvin.log |
| Monitor the log and filter for errors | tail -f marvin.log | grep ERROR |
| Monitor the log with errors highlighted | tail -f marvin.log | grep ERROR -color |
| Display the last 100 lines of the log | tail -n 100 marvin.log |
| Browse the log one page at a time | more marvin.log |
| Show the shell command history | history |
| Check disk usage of the log directory | du -sh /var/log |
| Generate a full VxRail diagnostic log bundle | /mystic/generateFullLogBundle |
/var is Running Low on Space: If the /var partition on the VxRail Manager appliance begins to run low on available space, you can identify usage and safely clear unnecessary log files. Check available space on VxRail manager with command “df -h”. Clear files under /var/log/microservice_log as needed:
| Step | Purpose / Description | Command |
|---|---|---|
| 1 | Check total disk usage of the log directory | du -sh /var/log |
| 2 | List files in the microservice log directory by modification time | ls -ltr /var/log/microservice_log |
| 3 | Navigate to the microservice log directory | cd /var/log/microservice_log |
| 4 | Remove old backup short-term logs | rm short.term.log_bak*.log |
| 5 | Remove old backup long-term logs | rm long.term_bak*.log |
| 6 | Remove old backup dayone logs | rm dayone_bak*.log |
Find Log or Configuration Files:
| Purpose / Description | Command |
|---|---|
Find the location of a specific log file, e.g., marvin.log | find /* -name marvin.log |
| Find all cluster-related log files | find /* -name *cluster.log |
Find the configuration file config-initial.json (case-insensitive) | find / -iname config-initial.json |
Lookup Event Codes:
psql -U postgres vxrail -c "SELECT * FROM serviceability.event_code ;"
psql -U postgres vxrail -c "SELECT * FROM serviceability.event_code ;" | grep MYSTIC010011
JSON: cat /var/lib/vmware-marvin/config-initial.json | json_pp
Manifest File: cat /var/lib/vmware-marvin/manifest.xml
Application Properties: cat /usr/lib/vmware-marvin/marvind/webapps/ROOT/WEB-INF/classes/application.properties
Confirm DNS entries in resolv.conf & DB: cat /etc/resolv.conf
NTP Validation (Returns 0): timeout 2 bash -c "</dev/udp/10.104.0.254/123"; echo $?
In terms of viewing a “Configuration complete!” equivalent message in the logs the string is :
cd /var/log/microservice_log
# cat dayone.log | grep "notify {'level': 'workflow', 'state': 'COMPLETED', 'progress': 100}"
RADAR VERSION: /mystic/radar/radar --version
Transfer Log Files via SCP (example):scp ./marvin.log.log ringd@10.10.0.10:/users/ringd/logs/
Using DU cmd to search for specific log files:
du -a -h / |grep dayone |grep log
du -a /var/log/ | sort -n -r | head -n 5

/mystic/generateLogBundle.py -v
The path of the log collection is printed on the screen:

Below are commonly used commands for checking ESXi host status, logs, networking, storage, and vSAN configuration within a VxRail environment.
| Purpose / Description | Command |
|---|---|
| Monitor the ESXi kernel log in real time | tail -f /var/log/vmkernel.log |
| Verify installed VxRail-related VIBs | esxcli software vib list | grep vxutils |
| Display ESXi and VMware build versions | vmware -vl |
| Check filesystem usage on the ESXi host | vdf -h |
| Display vSAN disk group and disk health information | vdq -qH |
| List VMkernel network interfaces | esxcfg-vmknic -l |
| Display vSAN network configuration | esxcli vsan network list |
| Show IPv4 configuration for VMkernel interfaces | esxcli network ip interface ipv4 get |
| List virtual switch configuration | esxcfg-vswitch -l |
| Purpose / Description | Command |
|---|---|
| Monitor the vCenter Server log in real time | tail -f /var/log/vmware/vpxd/vpxd.log |
journalctl -xeu vmware-marvin.service

On the vxrail manager in /var/log/messages there are events indicating a duplicate IPv6 address is detected & kubernates fails to deploy:
cat /var/log/messages | grep "IPv6 duplicate address"

systemctl status runjars.service
systemctl status vmware-marvin.service

Modify the IPV6 address:
vi /etc/sysconfig/network/ifcfg-eth0
IPADDR0=’fd39:3939:3939:3939::180‘
Save & exit :wq!
systemctl restart network
Reboot VXRM.
After ~10 minutes check that kubernates “helium” pods havd been deployed:

Confirm services are active or start if not:
systemctl status runjars.service
systemctl status vmware-marvin.service
systemctl start vmware-marvin
systemctl start runjars