Excessive logs in the nsxdavim.log might cause an overload of the syslog server
search cancel

Excessive logs in the nsxdavim.log might cause an overload of the syslog server

book

Article ID: 418328

calendar_today

Updated On:

Products

VMware vCenter Server 8.0 VMware vCenter Protect 8.x and 9.x

Issue/Introduction

The high volume of logs being sent to a configured syslog server leading to:

  • Overload: The syslog server might struggle to keep up with the ingress rate, leading to performance degradation.
  • Resource Exhaustion: Excessive disk usage on the syslog server.
  • Loss of Important Logs: Critical events might be delayed or dropped amidst the flood of less important nsxdavim.log entries.
  • Troubleshooting Difficulty: Sifting through excessive logs makes it harder to diagnose actual problems.

Environment

  • 8.0 Update 3F or Below. 
  • NSX-T 4.2.x.x

Cause

Overload of the syslog server was triggered by frequent "add," "update," and "delete"  might cause excessive logs in the nsxdavim.log, originating from hostd (the ESXi host management agent) specifically on NSX distributed virtual port groups.

Resolution

This issue is resolved in 8.0 Update 3G

Additional Information

VMware ESXi 8.0 Update 3g Release Notes