The SoS utility writes the component log files into an output directory structure within the file system of the SDDC Manager instance in which the command is initiated, for example:

vcf@sddc-manager [ ~ ]$ sudo /opt/vmware/sddc-support/sos
[sudo] password for vcf
Welcome to Supportability and Serviceability(SoS) utility!
Performing SoS operation for MGMT domain components
Logs : /var/log/vmware/vcf/sddc-support/sos-2019-09-03-20-55-41-10053
Log file : /var/log/vmware/vcf/sddc-support/sos-2019-09-03-20-55-41-10053/sos.log
NOTE : The Health check operation was invoked without --skip-known-host-check, and so will skip Connectivity Health, Password Health and Certificate Health Checks because of security reasons.

Log Collection completed successfully for : [HEALTH-CHECK, SDDC-MANAGER, NSX_MANAGER, PSC, API-LOGS, ESX, LOGINSIGHT, VMS_SCREENSHOT, VCENTER-SERVER, VCF-SUMMARY]                           

esx Directory Contents

In each rack-specific directory, the esx directory contains the following diagnostic files collected for each ESXi host in the rack:

File Description
esx-IP-address.tgz

Diagnostic information from running the vm-support command on the ESXi host.

An example file is esx-192.168.100.101.tgz.

SmartInfo-IP-address.txt

S.M.A.R.T. status of the ESXi host's hard drive (Self-Monitoring, Analysis, and Reporting Technology).

An example file is SmartInfo-192.168.100.101.txt.

vsan-health-IP-address.txt

vSAN cluster health information from running the standard command python /usr/lib/vmware/vsan/bin/vsan-health-status.pyc on the ESXi host.

An example file is vsan-health-192.168.100.101.txt.

loginsight Directory Contents

The loginsight directory contains diagnostic information files collected from the vRealize Log Insight cluster. The support bundle for each node is collected from the cluster's load balancer VM.
File Description
load-balancer.vrack.vsphere.local-loginsight-support.tgz Compressed TAR file consisting of support bundles collected from each node in the vRealize Log Insight cluster. For example: loginsight-loginsight-node-<node -number>.vrack.vsphere.local-<time-stamp>.
loginsight-loginsight-node-<node -number>.vrack.vsphere.local-<time-stamp> Contains the following: README, boot, error.log, etc, proc, usr, action.log, commands, errors-ignored.log, opt, storage, and var.

nsx Directory Contents

In each rack-specific directory, the nsx directory contains the diagnostic information files collected for the NSX Manager, NSX Controller, and NSX Edge instances deployed in that rack.

The number of files in this directory depends on the number of NSX Manager, NSX Controller, and NSX Edge instances that are deployed in the rack. In a given rack, each management domain has one NSX Manager instance and a minimum of three NSX Controller instances, and any VI workload domains in the rack each have one NSX Manager instance and at least three NSX Controller instances. NSX Edge instances are only deployed to support vRealize Operations and vRealize Automation, which are optional components.

File Description
VMware-NSX-Manager-tech-support-nsxmanagerIPaddr.tar.gz Standard NSX Manager compressed support bundle, generated using the NSX for vSphere API POST https://nsxmanagerIPaddr/api/1.0/appliance-management/techsupportlogs/NSX, where nsxmanagerIPaddr is the IP address of the NSX Manager instance.

An example is VMware-NSX-Manager-tech-support-10.0.0.8.tar.gz.

VMware-NSX-Controller-tech-support-nsxmanagerIPaddr-controller-controllerId.tgz Standard NSX Controller compressed support bundle, generated using the NSX for vSphere API to query the NSX Controller technical support logs: GET https://nsxmanagerIPaddr/api/2.0/vdn/controller/controllerId/techsupportlogs, where nsxmanagerIPaddr is the IP address of the NSX Manager instance and controllerID identifies the NSX Controller instance.

Examples are VMware-NSX-Controller-tech-support-10.0.0.8-controller-1.tgz, VMware-NSX-Controller-tech-support-10.0.0.8-controller-2.tgz, VMware-NSX-Controller-tech-support-10.0.0.8-controller-3.tgz.

VMware-NSX-Edge-tech-support-nsxmanagerIPaddr-edgeId.tgz
Note: This information will only be collected if NSX Edges are deployed.
Standard NSX Edge support bundle, generated using the NSX for vSphere API to query the NSX Edge support logs: GET https://nsxmanagerIPaddr/api/4.0/edges/edgeId/techsupportlogs, where nsxmanagerIPaddr is the IP address of the NSX Manager instance and edgeID identifies the NSX Edge instance.

An example is VMware-NSX-Edge-tech-support-10.0.0.7-edge-1.log.gz.

psc Directory Contents

In the rack-1 directory, the psc directory contains the diagnostic information files collected for the Platform Services Controller instances deployed in that rack.

File Description
vm-support-pscIPaddr.tar.gz Standard Platform Services Controller support bundle downloaded from the Platform Services Controller instance with IP address pscIPaddr.

vc Directory Contents

In each rack-specific directory, the vc directory contains the diagnostic information files collected for the vCenter Server instances deployed in that rack.

The number of files in this directory depends on the number of vCenter Server instances that are deployed in the rack. In a given rack, each management domain has one vCenter Server instance, and any VI workload domains in the rack each have one vCenter Server instance.

File Description
vc-vcsaFQDN-timestamp.tgz Standard vCenter Server support bundle downloaded from the vCenter Server Appliance instance having a fully-qualified domain name vcsaFQDN. The support bundle is obtained from the instance using the standard vc-support.sh command.