vCenter is the key object for monitoring and reporting as it is the key building block in a VCF environment. Diagnostics helps you with that task and adds value by providing data for reachability, utilization, and services that you cannot derive from legacy tools.
In the Services screen, Diagnostics monitors the critical vCenter services.
VCF Operations 9.x
vCenter Server
| Service Name | Service Description | Log Location |
| envoy | VMware Envoy is a front-end proxy that handles incoming requests on ports 443 and 80 | /var/log/vmware/envoy/envoy.log |
| envoy-hgw | The vmware-envoy-hgw service is essential for vCenter to communicate with ESXi hosts. If this service is stopped or fails, ESXi hosts might be marked as "Not Responding", and you might experience issues connecting to vCenter. | /var/log/vmware/envoy-hgw/envoy.log |
| envoy-sidecar | Envoy-sidecar is a separate component that acts as a sidecar proxy, handling internal service-to-service communication within the vCenter Appliance. | /var/log/vmware/envoy-sidecar/envoy.log |
| vmware-vpostgres | VMware Postgres is the vCenter database service | /var/log/vmware/vpostgres/postgresql.log |
| vpxd | VMware vCenter Server primary service | /var/log/vmware/vpxd/vpxd.log |
| vsphere-ui | vSphere Web Client service | /var/log/vmware/vsphere-ui/logs/vsphere_client_virgo.log |
| rhttpproxy | The Envoy proxy configurator, this service is responsible for managing HTTP proxy configurations, ensuring seamless connectivity between various vCenter services | /var/log/vmware/rhttpproxy/rhttpproxy.log |
| vapi-endpoint | The vAPI Endpoint service provides a unified API framework, enabling developers and administrators to interact programmatically with vCenter using RESTful interfaces | /var/log/vmware/vapi/endpoint/endpoint.log |
| applmgmt | The vCenter Appliance Management Service provides administrative tools for managing the vCenter Server Appliance, including updates, configurations, and system-level settings | /var/log/vmware/applmgmt/applmgmt.log |
| vmware-vmon | The vCenter Appliance Monitoring Service ensures the health and availability of vCenter components by monitoring their performance and providing alerts for potential issues | /var/log/vmware/vmon/vmon.log |
| sts | The vCenter Security Token Service (STS) enables secure identity management in vSphere by handling token-based authentication, SSO, OpenID Connect, and service account management. It ensures seamless integration with VMware services and external identity providers, providing centralized, secure access control | /var/log/vmware/sso/vmware-identity-sts.log |
| vpxd-svcs | This service hosts several critical components such as the Authz service, Tagging service, KV Store, Compute Policy, and Fault Domains. It plays a key role in policy enforcement and tagging functionality | /var/log/vmware/vpxd-svcs/vpxd-svcs.log |
| wcp | This service facilitates the orchestration and management of vSphere Supervisors, allowing users to deploy, manage, and scale VM and containerized workloads seamlessly | /var/log/vmware/wcp/wcpsvc.log |
| lookupsvc | The Lookup Service contains a registry of vSphere services, helping components discover and interact with one another efficiently and dynamically | /var/log/vmware/lookupsvc/lookupserver-default.log |
| vsan-health | The vSAN health service monitors the performance and integrity of VMware vSAN storage systems, providing real-time health checks and recommendations | /var/log/vmware/vsan-health/vsanvcmgmtd.log |
| cis-license | The License Service is responsible for managing and validating software licenses within the vSphere environment, ensuring compliance and proper resource allocation | /var/log/vmware/cis-license/license.log |
| vc-ws1a-broker | The ws1b service (Identity Broker) add support to the modern identity providers—such as Okta, Azure AD, and PingFederate—using protocols like OIDC, SAML 2.0, and SCIM 2.0 | /var/log/vmware/vc-ws1a-broker/accesscontrol-service.log |