About the directory where vmsyslog dropped logs are saved in ESXi

Products

• VMware vSphere ESXi

Issue/Introduction

/var/run/log/vmkernel.log contains log output indicating dropped log messages.
yyyy-mm-dd ALERT: vmsyslog logger X.X.X.X:514 lost 1 log message

/var/run/log/vmsyslogd.err contains log output similar to the following:
yyyy-mm-dd vmsyslog.msgQueue : ERROR ] X.X.X.X:514 - lost 751 log messages

Environment

ESXi

Resolution

The dropped logs are output to the following log file on the ESXi host.

/var/run/log/vmsyslogd-dropped.log

Additional Information

It is also described in the following document.

Syslog Message Queueing for Remote Hosts and Message Drops

japaneseKB:ESXiにおけるvmsyslogのドロップしたログの保存ディレクトリについて