ESXi 4: root cause "freeze", howto find in logging?

Hi,

We had an issue with a "freezing" esxi 4. It was rebooted before I actually could see what happened but now I would like to find out (it is in maintenance mode). I roughly have an idea when it happened (yesterday evening).

What I do can see is that time is totally wrong (January 2013), but how can I find what actually went wrong (looked into the logfile with vi but that's a pain in the ass to find anything usefull, isn't there something more userfriendly?).
janhoedtAsked:
Who is Participating?
 
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
No mention in OP, you had the logs on LUN, syslog server is better. (SAN fails/LUN fails logging is lost!)

upload the log files here, in future, send logging to a syslog server, makes the logs easier to read.

are you using iSCSI, any changes to paths, or LUNs, datastores removed?
0
 
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
With ESXi it will be difficult to find out after the event, when the server was restarted because the logs are not stored.

I would recommend setting up a Syslog Server or using vMA, to send the logs from the ESXi server to a remote logging server, so you will have all the logs the next time this occurs.

VMware KB: Enabling syslog on ESXi 3.5 and 4.x

VMware have just launched vCenter Log Insight, which is also a graphical Syslog server, based losely on Splunk!
http://www.vmware.com/products/datacenter-virtualization/vcenter-log-insight/overview.html

It's in Beta, but shows graphical syslog entries, which may be easier for you to diagnose. It's also FREE, easy to deploy via OVA/OVF appliance, and ready to run and collect syslog entries in 5 minutes.

But I would check hardware, memory, with memtest, re-seat any memory chips, check fans, heatsinks etc
0
 
janhoedtAuthor Commented:
Thanks hanccoccka, but logfiles ARE stored, since we moved the scratch-partition  to a LUN. So, I do have the logfiles. Please advise.
J.
0
 
janhoedtAuthor Commented:
Ok, thanks for the input. So bottomline is: there is no easy way to anaylyze logfiles BUT a syslog-server.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.