There are several different logs you can capture to use while troubleshooting Guest Introspection. ESX GI Module (MUX) LogsIf virtual machines on an ESXi host are not working with Guest Introspection, or if there are alarms on a host regarding communication to the SVA, then it could be a problem with the ESX GI Module on the ESXi host. GI Thin Agent LogsThe thin agent is installed on the VM Guest OS and detects user logon details. GI EPSecLib and SVM Logs The EPSecLib receives events from the ESXi host ESX GI Module (MUX). Parent topic: Troubleshooting Guest Introspection