Solved

ESXi 4: root cause "freeze", howto find in logging?

Posted on 2013-06-21
6
501 Views
Last Modified: 2013-06-24
Hi,

We had an issue with a "freezing" esxi 4. It was rebooted before I actually could see what happened but now I would like to find out (it is in maintenance mode). I roughly have an idea when it happened (yesterday evening).

What I do can see is that time is totally wrong (January 2013), but how can I find what actually went wrong (looked into the logfile with vi but that's a pain in the ass to find anything usefull, isn't there something more userfriendly?).
0
Comment
Question by:janhoedt
  • 2
  • 2
6 Comments
 
LVL 117
ID: 39265350
With ESXi it will be difficult to find out after the event, when the server was restarted because the logs are not stored.

I would recommend setting up a Syslog Server or using vMA, to send the logs from the ESXi server to a remote logging server, so you will have all the logs the next time this occurs.

VMware KB: Enabling syslog on ESXi 3.5 and 4.x

VMware have just launched vCenter Log Insight, which is also a graphical Syslog server, based losely on Splunk!
http://www.vmware.com/products/datacenter-virtualization/vcenter-log-insight/overview.html

It's in Beta, but shows graphical syslog entries, which may be easier for you to diagnose. It's also FREE, easy to deploy via OVA/OVF appliance, and ready to run and collect syslog entries in 5 minutes.

But I would check hardware, memory, with memtest, re-seat any memory chips, check fans, heatsinks etc
0
 

Author Comment

by:janhoedt
ID: 39265511
Thanks hanccoccka, but logfiles ARE stored, since we moved the scratch-partition  to a LUN. So, I do have the logfiles. Please advise.
J.
0
 
LVL 117

Accepted Solution

by:
Andrew Hancock (VMware vExpert / EE MVE) earned 500 total points
ID: 39271265
No mention in OP, you had the logs on LUN, syslog server is better. (SAN fails/LUN fails logging is lost!)

upload the log files here, in future, send logging to a syslog server, makes the logs easier to read.

are you using iSCSI, any changes to paths, or LUNs, datastores removed?
0
 

Author Closing Comment

by:janhoedt
ID: 39271622
Ok, thanks for the input. So bottomline is: there is no easy way to anaylyze logfiles BUT a syslog-server.
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

VM backup deduplication is a method of reducing the amount of storage space needed to save VM backups. In most organizations, VMs contain many duplicate copies of data, such as VMs deployed from the same template, VMs with the same OS, or VMs that h…
In this article, I will show you HOW TO: Create your first Windows Virtual Machine on a VMware vSphere Hypervisor 6.5 (ESXi 6.5) Host Server, the Windows OS we will install is Windows Server 2016.
Teach the user how to join ESXi hosts to Active Directory domains Open vSphere Client: Join ESXi host to AD domain: Verify ESXi computer account in AD: Configure permissions for domain user in ESXi: Test domain user login to ESXi host:
This video shows you how easy it is to boot from ISO images for virtual machines with the ISO images stored on a local datastore on the ESXi host.

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now