An administrator is troubleshooting a virtual machine that has unexpectedly powered off.
Which two logs should be used to troubleshoot the issue? (Choose two.)
A.
vmware.log
B.
hostd.log
C.
syslog.log
D.
shell.log
Explanation:
Explanation/Reference:
B is correct
https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.monitoring.doc%2FGUID-832A2618-6B11-4A28-9672-93296DA931D0.html
0
0
A is also correct.
0
0
A & B are correct answers.
0
0
‘D’ could also be correct as a VM can be powered off forcefully from ESX shell using
esxcli vm process kill
In that case, shell.log can be used for auditing, i.e. to see if such command was issued.
0
0
Would that be called unexpectedly ?
1
0
One of the main reasons for using auditing tools is the ability to investigate possible unauthorized activities that no one in their right mind would plan for 😉
0
0
You’re right, if you think of an unauthorized access is unexptected. That’s a matter of realizing human’s nature 🙂
On the other hand technical failures are not so unexpected 🙁
0
0
“A” & “C” are the correct for me.
An administrator is “troubleshooting” (syslog.log => can be used for troubleshooting)
a virtual machine that has unexpectedly “powered off” (vmware.log => Contains virtual machine power events).
0
0
A & B
https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.monitoring.doc/GUID-832A2618-6B11-4A28-9672-93296DA931D0.html
syslog.log description says that is for “general log”, but vmware.log and hostd.log are more specific for virtual machines.
0
0