Symptoms:
Transport (VMDB) error -45: Failed to connect to peer process.
[CRITICAL] vmsyslogd daemon starting
[ERROR] Files are missing from the audit record storage directory
vSphere ESXi 7.x
This issue occurs because the auditLog directory cannot be changed while auditrecords are enabled.
Check audit records:$ esxcli system auditrecords getAuditRecordStatus:Audit Record Remote Transmission Active: falseAudit Record Storage Active: trueAudit Record Storage Capacity: 100Audit Record Storage Directory: /scratch/auditLog
Disable audit records:
$ esxcli system auditrecords local disable
Enable Audit records:$ esxcli system auditrecords local enable
Show contents of auditLog directory:$ ls /scratch/auditLog
Creates an audit record storage directory and unless specified, sets /scratch/auditLog as the default location. You must not manually create an audit record storage directory and you cannot change the audit record storage directory while audit record storage is enabled (see Syslog.global.uditRecord.storageEnable).