You have deployed a vShield Endpoint for antivirus and malware detection on an NSX network
and need to monitor audit messages for the endpoint.
Which log file are the audit messages recorded in?
A.
vmkwarning.log on the ESXi host
B.
vmware.log on the virtual machine
C.
cloudnet_cpp.log on the NSX Controller
D.
messages.log on the NSX Manager
I am guessing vmkwarning.log on the ESXi host
The above is incorrect, it is B. vmware.log file attached to the Virtual Machine
vmware.log file is correct.
From: https://pubs.vmware.com/NSX-6/topic/com.vmware.nsx.admin.doc/GUID-5F3AEDC2-3AE9-49CA-8907-83857089DDF6.html
“Audit messages include fatal errors and other important audit messages and are logged to vmware.log.”