Symptoms:
Transport (VMDB) error -45: Failed to connect to peer process.
CRITICAL] vmsyslogd daemon starting
ERROR ] Files are missing from the audit record storage directory
esxcli system auditrecords get
AuditRecordStatus:
Audit Record Remote Transmission Active: false
Audit Record Storage Active: true
Audit Record Storage Capacity: 100
Audit Record Storage Directory: /scratch/auditLog
vSphere ESXi 7.x
This issue occurs because the auditLog directory cannot be changed while auditrecords are enabled.
# esxcli system auditrecords local disable
# esxcli system auditrecords local enable
# ls /scratch/auditLog
Creates an audit record storage directory and unless specified, sets /scratch/auditLog as the default location. You must not manually create an audit record storage directory and you cannot change the audit record storage directory while audit record storage is enabled (see Syslog.global.uditRecord.storageEnable).