• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 513
  • Last Modified:

ESXi 4: root cause "freeze", howto find in logging?

Hi,

We had an issue with a "freezing" esxi 4. It was rebooted before I actually could see what happened but now I would like to find out (it is in maintenance mode). I roughly have an idea when it happened (yesterday evening).

What I do can see is that time is totally wrong (January 2013), but how can I find what actually went wrong (looked into the logfile with vi but that's a pain in the ass to find anything usefull, isn't there something more userfriendly?).
0
janhoedt
Asked:
janhoedt
  • 2
  • 2
1 Solution
 
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
With ESXi it will be difficult to find out after the event, when the server was restarted because the logs are not stored.

I would recommend setting up a Syslog Server or using vMA, to send the logs from the ESXi server to a remote logging server, so you will have all the logs the next time this occurs.

VMware KB: Enabling syslog on ESXi 3.5 and 4.x

VMware have just launched vCenter Log Insight, which is also a graphical Syslog server, based losely on Splunk!
http://www.vmware.com/products/datacenter-virtualization/vcenter-log-insight/overview.html

It's in Beta, but shows graphical syslog entries, which may be easier for you to diagnose. It's also FREE, easy to deploy via OVA/OVF appliance, and ready to run and collect syslog entries in 5 minutes.

But I would check hardware, memory, with memtest, re-seat any memory chips, check fans, heatsinks etc
0
 
janhoedtAuthor Commented:
Thanks hanccoccka, but logfiles ARE stored, since we moved the scratch-partition  to a LUN. So, I do have the logfiles. Please advise.
J.
0
 
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
No mention in OP, you had the logs on LUN, syslog server is better. (SAN fails/LUN fails logging is lost!)

upload the log files here, in future, send logging to a syslog server, makes the logs easier to read.

are you using iSCSI, any changes to paths, or LUNs, datastores removed?
0
 
janhoedtAuthor Commented:
Ok, thanks for the input. So bottomline is: there is no easy way to anaylyze logfiles BUT a syslog-server.
0

Featured Post

[Webinar] Improve your customer journey

A positive customer journey is important in attracting and retaining business. To improve this experience, you can use Google Maps APIs to increase checkout conversions, boost user engagement, and optimize order fulfillment. Learn how in this webinar presented by Dito.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now