This article provides details on how to identify NSX segment creation, deletion and update activities and the corresponding log entries seen in the /var/log/syslog file.
VMware NSX
Identifying creation, deletion and update activities from /var/log/syslog with respect to a Segment named "Segment_test".
1. Creation:
2026-05-21T05:18:35.420Z #########.local NSX 6320 - [nsx@6876 audit="true" comp="nsx-manager" level="INFO" reqId="07095ee2-ed20-4254-846e-e5011768bc89" subcomp="manager" update="true" username="admin"] UserName="admin", Src="fd00:0:1:6e::c0a8:6e0a", ModuleName="PolicyConnectivity", Operation="PatchInfraSegment", Operation status="success",Newvalue=["Segment_test"{"subnets":[{"gateway_address":"192.168.60.1/24"}],"connectivity_path":"/infra/tier-1s/T1-Gateway-01","transport_zone_path":"/infra/sites/default/enforcement-points/default/transport-zones/Overlay-TZ","advanced_config"{"hybrid":false,"multicast":true,"inter_router":false,"local_egress":false,"urpf_mode":"STRICT","connectivity":"ON"},"admin_state":"UP","replication_mode":"MTEP","resource_type":"Segment","id":"Segment_test","display_name":"Segment_test","path":"/infra/segments/Segment_test","marked_for_delete":false,"overridden":false}]2026-05-21T05:18:35.443Z #########.local NSX 6320 SWITCHING [nsx@6876 comp="nsx-manager" level="INFO" subcomp="manager"] handleSegmentChange: segmentPath /infra/segments/Segment_test2026-05-21T05:18:35.445Z #########.local NSX 6320 SWITCHING [nsx@6876 comp="nsx-manager" level="INFO" subcomp="manager"] Realized segment /infra/realized-state/enforcement-points/default/logical-switches/infra-Segment_test-ls does not exist. Creating it.2026-05-21T05:18:35.538Z #########.local NSX 6320 SWITCHING [nsx@6876 comp="nsx-manager" level="INFO" subcomp="manager"] Creating the logical switch for segment /infra/segments/Segment_test on NSX
Keywords: Operation="PatchInfraSegment", Creating
2. Deletion:
2026-05-21T06:03:06.570Z #########.local NSX 6320 - [nsx@6876 audit="true" comp="nsx-manager" entId="Segment_test" level="INFO" reqId="f5eba983-2a59-4f45-97ff-362065b87eb8" subcomp="manager" update="true" username="admin"] UserName="admin", Src="fd00:0:1:6e::c0a8:6e0a", ModuleName="PolicyConnectivity", Operation="DeleteInfraSegment", Operation status="success", Old value=[{"type":"ROUTED","subnets":[{"gateway_address":"192.168.70.1/24","network":"192.168.70.0/24"}],"connectivity_path":"/infra/tier-1s/T1-Gateway-01","transport_zone_path":"/infra/sites/default/enforcement-points/default/transport-zones OverlayTZ","advanced_config"{"hybrid":false,"multicast":true,"inter_router":false,"local_egress":false,"urpf_mode":"STRICT","connectivity":"ON"},"admin_state":"UP","replication_mode":"MTEP","resource_type":"Segment","id":"Segment_test","display_name":"Segment_test","path":"infrasegmentsSegment_test","relative_path":"Segment_test","parent_path":"infra","unique_id":"3f5d04c5-082e-4f43b542df78f794899c","realization_id":"3f5d04c5-082e-4f43b542df78f794899c","owner_id":"b976e0be-4a3b-471ebb6f-1b672e98c706","marked_for_delete":false,"overridden":false,"_system_owned":false,"_protection":"NOT_PROTECTED","_create_time":1779340715408,"_create_user":"admin","_last_modified_time":1779341983190,"_last_modified_user":"admin","_revision":1}], New value=["Segment_test"]2026-05-21T06:03:06.838Z #########.local NSX 6320 SWITCHING [nsx@6876 comp="nsx-manager" level="INFO" subcomp="manager"] Request to delete LogicalPort LogicalPort/7e26c3ae-115e-45f8-a6f5-41240260ec122026-05-21T06:03:10.848Z #########.local NSX 6320 SWITCHING [nsx@6876 comp="nsx-manager" level="INFO" subcomp="manager"] nsxpg delete request on vds Test_VDS, dvpgKeyToMoid 172026-05-21T06:03:11.205Z #########.local NSX 6320 SWITCHING [nsx@6876 comp="nsx-manager" level="INFO" subcomp="manager"] nsxpg deleted on vds 50 1d 00 40 3f c0 6b 24-a0 ec d8 07 9a 83 48 44 for ls LogicalSwitchState/3f5d04c5-082e-4f43-b542-df78f794899c2026-05-21T06:03:11.205Z #########.local NSX 6320 SWITCHING [nsx@6876 comp="nsx-manager" level="INFO" subcomp="manager"] nsxpg Batch nsx portgroup delete receives data : NsxPortgroupData{cmId='ab4e40ed-56a6-4bb0-a285-e516ce84bcd1', nsxPortgroups='null', issues='null', super{CmResponseDetail{responseDetailType='null', responseDetails='null'}}}
Keywords: Operation="DeleteInfraSegment", delete request on vds
3. Updation:
Changing the gateway of the segment from 192.168.60.1/24 to 192.168.70.1/24
2026-05-21T05:39:43.195Z #########.local NSX 6320 - [nsx@6876 audit="true" comp="nsx-manager" level="INFO" reqId="7409fbd4-a219-432a-9642-0fe99791a73a" subcomp="manager" update="true" username="admin"] UserName="admin", Src="fd00:0:1:6e::c0a8:6e0a",ModuleName="PolicyConnectivity",Operation="PatchInfraSegment",Operationstatus="success"Old value=[{"type":"ROUTED","subnets"[{"gateway_address":"192.168.60.1/24","network":"192.168.60.0/24"}],"connectivity_path":"/infra/tier-1s/T1-Gateway-01","transport_zone_path":"/infra/sites/default/enforcement-points/default/transport-zones/Overlay-TZ","advanced_config":{"hybrid":false,"multicast":true,"inter_router":false,"local_egress":false,"urpf_mode":"STRICT","connectivity":"ON"},"admin_state":"UP","replication_mode":"MTEP","resource_type":"Segment","id":"Segment_test","display_name":"Segment_test","path":"/infra/segments/Segment_test","relative_path":"Segment_test","parent_path":"/infra","unique_id":"3f5d04c5-082e-4f43-b542df78f794899c","realization_id":"3f5d04c5-082e-4f43-b542-df78f794899c","owner_id":"b976e0be-4a3b-471e-bb6f-1b672e98c706","marked_for_delete":false,"overridden":false,"_system_owned":false,"_protection":"NOT_PROTECTED","_create_time":1779340715408,"_create_user":"admin","_last_modified_time":1779340715408,"_last_modified_user":"admin","_revision":0}], New value=["Segment_test" {"type":"ROUTED","subnets":[{"gateway_address":"192.168.70.1/24"}],"connectivity_path":"/infra/tier-1s/T1-Gateway-01","transport_zone_path":"/infra/sites/default/enforcement-points/default/transport-zones/OverlayTZ","advanced_config"{"hybrid":false,"multicast":true,"inter_router":false,"local_egress":false,"urpf_mode":"STRICT","connectivity":"ON"},"admin_state":"UP","replication_mode":"MTEP","resource_type":"Segment","id":"Segment_test","display_name":"Segment_test","path":"/infra/segments/Segment_test","relative_path":"Segment_test","parent_path":"/infra","unique_id":"3f5d04c5-082e-4f43-b542-df78f794899c","realization_id":"3f5d04c5-082e-4f43b542df78f794899c","owner_id":"b976e0be-4a3b-471ebb6f-1b672e98c706","marked_for_delete":false,"overridden":false,"_system_owned":false,"_create_time":1779340715408,"_create_user":"admin","_last_modified_time":1779340715408,"_last_modified_user":"admin","_revision":0}]
Keywords: Operation="PatchInfraSegment",Old Value, New value.
For more details regarding NSX log files and their contents, please refer to the following KB article: 317683