An administrator is troubleshooting a virtual machine that has unexpectedly powered off.
Which two logs should be used to troubleshoot the issue? (Choose two.)
A.
vmware.log
B.
hostd.log
C.
syslog.log
D.
shell.log
Explanation:
Explanation/Reference:
B is correct
https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.monitoring.doc%2FGUID-832A2618-6B11-4A28-9672-93296DA931D0.html
A is also correct.
A & B are correct answers.
‘D’ could also be correct as a VM can be powered off forcefully from ESX shell using
esxcli vm process kill
In that case, shell.log can be used for auditing, i.e. to see if such command was issued.
Would that be called unexpectedly ?
One of the main reasons for using auditing tools is the ability to investigate possible unauthorized activities that no one in their right mind would plan for 😉
You’re right, if you think of an unauthorized access is unexptected. That’s a matter of realizing human’s nature 🙂
On the other hand technical failures are not so unexpected 🙁
“A” & “C” are the correct for me.
An administrator is “troubleshooting” (syslog.log => can be used for troubleshooting)
a virtual machine that has unexpectedly “powered off” (vmware.log => Contains virtual machine power events).
A & B
https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.monitoring.doc/GUID-832A2618-6B11-4A28-9672-93296DA931D0.html
syslog.log description says that is for “general log”, but vmware.log and hostd.log are more specific for virtual machines.