You can configure the syslog server and view technical support logs for each NSX component. Management plane logs are available through NSX Manager and data plane logs are available through vCenter Server. Hence, it is recommended that you specify the same syslog server for the NSX component and vCenter Server in order to get a complete picture when viewing logs on the syslog server.

For information on configuring a syslog server for hosts managed by a vCenter Server, see the appropriate version of vSphere documentation at https://docs.vmware.com.
Note: Syslog or jump servers used to collect logs and access an NSX Distributed Logical Router (DLR) Control VM can't be on the logical switch that is directly attached to that DLR's logical interfaces.
Table 1. NSX Logs
Component Description
ESXi Logs

These logs are collected as part of the VM support bundle generated from vCenter Server.

For more information on ESXi log files, refer to vSphere documentation.

NSX Edge Logs

Use the show log [follow | reverse] command in the NSX Edge CLI.

Download Technical Support Log bundle via NSX Edge UI.

NSX Manager Logs

Use the show log CLI command in the NSX Manager CLI.

Download Technical Support Log bundle via the NSX Manager Virtual Appliance UI.

Routing Logs See the NSX Logging and System Events Guide.
Firewall Logs See NSX Logging and System Events Guide.
Guest Introspection Logs See NSX Logging and System Events Guide.

NSX Manager

To specify a syslog server, see Configure a Syslog Server for NSX Manager.

To download technical support logs, see Download Technical Support Logs for NSX.

NSX Edge

To specify a syslog server, see Configure Syslog Servers for NSX Edge.

To download technical support logs, see Download Tech Support Logs for NSX Edge.

NSX Controller

To specify a syslog server, see Configure DNS, NTP, and Syslog for the NSX Controller Cluster.

To download technical support logs, see Download Technical Support Logs for NSX Controller.

Firewall

For more details, refer to Firewall Logs.