Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

ESXi 4: root cause "freeze", howto find in logging?

Posted on 2013-06-21
6
Medium Priority
?
511 Views
Last Modified: 2013-06-24
Hi,

We had an issue with a "freezing" esxi 4. It was rebooted before I actually could see what happened but now I would like to find out (it is in maintenance mode). I roughly have an idea when it happened (yesterday evening).

What I do can see is that time is totally wrong (January 2013), but how can I find what actually went wrong (looked into the logfile with vi but that's a pain in the ass to find anything usefull, isn't there something more userfriendly?).
0
Comment
Question by:janhoedt
  • 2
  • 2
4 Comments
 
LVL 124
ID: 39265350
With ESXi it will be difficult to find out after the event, when the server was restarted because the logs are not stored.

I would recommend setting up a Syslog Server or using vMA, to send the logs from the ESXi server to a remote logging server, so you will have all the logs the next time this occurs.

VMware KB: Enabling syslog on ESXi 3.5 and 4.x

VMware have just launched vCenter Log Insight, which is also a graphical Syslog server, based losely on Splunk!
http://www.vmware.com/products/datacenter-virtualization/vcenter-log-insight/overview.html

It's in Beta, but shows graphical syslog entries, which may be easier for you to diagnose. It's also FREE, easy to deploy via OVA/OVF appliance, and ready to run and collect syslog entries in 5 minutes.

But I would check hardware, memory, with memtest, re-seat any memory chips, check fans, heatsinks etc
0
 

Author Comment

by:janhoedt
ID: 39265511
Thanks hanccoccka, but logfiles ARE stored, since we moved the scratch-partition  to a LUN. So, I do have the logfiles. Please advise.
J.
0
 
LVL 124

Accepted Solution

by:
Andrew Hancock (VMware vExpert / EE MVE^2) earned 2000 total points
ID: 39271265
No mention in OP, you had the logs on LUN, syslog server is better. (SAN fails/LUN fails logging is lost!)

upload the log files here, in future, send logging to a syslog server, makes the logs easier to read.

are you using iSCSI, any changes to paths, or LUNs, datastores removed?
0
 

Author Closing Comment

by:janhoedt
ID: 39271622
Ok, thanks for the input. So bottomline is: there is no easy way to anaylyze logfiles BUT a syslog-server.
0

Featured Post

When ransomware hits your clients, what do you do?

MSPs: Endpoint security isn’t enough to prevent ransomware.
As the impact and severity of crypto ransomware attacks has grown, Webroot fought back, not just by building a next-gen endpoint solution capable of preventing ransomware attacks but also by being a thought leader.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article outlines why you need to choose a backup solution that protects your entire environment – including your VMware ESXi and Microsoft Hyper-V virtualization hosts – not just your virtual machines.
Ransomware is a malware that is again in the list of security  concerns. Not only for companies, but also for Government security and  even at personal use. IT departments should be aware and have the right  knowledge to how to fight it.
Teach the user how to install and configure the vCenter Orchestrator virtual appliance Open vSphere Web Client: Deploy vCenter Orchestrator virtual appliance OVA file: Verify vCenter Orchestrator virtual appliance boots successfully: Connect to the …
Teach the user how to join ESXi hosts to Active Directory domains Open vSphere Client: Join ESXi host to AD domain: Verify ESXi computer account in AD: Configure permissions for domain user in ESXi: Test domain user login to ESXi host:

783 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question