Know the different files collected when you download a support bundle and the features that store logs in these file paths.

NSX-T Data Center Node Support Bundle

File Path Features Using the File Path
/var/log/syslog All
/var/log/proton/nsxapi.log All
/var/log/policy/policy.log All
/var/log/cm-inventory/cm-inventory.log Endpoint Security, Deployment, NSX Edge Install, VmotionInventory, NCP/Openshift/PKS-windows,Install / Host Upgrade and Install
/var/log/migration-coordinator/v2t/cm.log Endpoint Security (V2T Migration), V2T
/var/log/proxy/reverse-proxy.log Host Upgrade And Install, AAA, NCP/Openshift/PKS-windows, CSM
/var/log/nvpapi/api_server.log AAA (Auth), Upgrade, BnR
/var/log/cloudnet/nsx-ccp.log DNS, Upgrade, IPDiscovery, Groups
/var/log/migration-coordinator/migration-coordinator.log V2T (NSX-V to NSX-T Data Center)
/var/log/migration-coordinator/v2t/summary.log V2T (NSX-V to NSX-T Data Center)
/var/log/upgrade Upgrade
/var/log/upgrade-coordinator/upgrade-coordinator.log Upgrade
/var/log/corfu/tanuki.log Upgrade
/var/log/cloudnet/nsx-ccp.log Upgrade
/var/log/proton/nsx-common-dashboard.log NCP/Openshift/PKS-windows
/var/log/search/elasticsearch.log NCP/Openshift/PKS-windows
/var/log/search/elasticsearch_index_indexing_slowlog.log NCP/Openshift/PKS-windows
/var/log/search/search-policy.log NCP/Openshift/PKS-windows
/var/log/policy/localhost_access_log.txt Realization, NCP/Openshift/PKS-windows
/var/log/nsx-audit.log Realization, Openstack
/var/log/phonehome-coordinator/phonehome-coordinator.log NCP/Openshift/PKS-windows, Alarm Event Framework,Telemetry, Cloud Service Manager (CSM) , Notification
/var/run/log/nsx-syslog.log Stateless Hosts/Transport Node Profile
/var/run/log/nsxaVim.log Stateless Hosts/ Transport Node Profile
/var/log/corfu/corfu.9000.log Clustering
/var/log/corfu/corfu-compactor-audit.log Clustering
/var/log/corfu-nonconfig/corfu.9040.log Clustering
/var/log/corfu-nonconfig/nonconfig-corfu-compactor-audit.log Clustering
/var/log/cbm/cbm.log Clustering
/var/log/proxy/localhost_access_log.txt Host Upgrade and Install, AAA(Auth)
/var/log/proxy/localhost.log Host Upgrade and Install
/var/log/cloudnet/nsx-ccp-transaction.log Groups
/var/log/proton-tomcat/nsxapi.log Spoofguard, Switch Security
/var/log/async-replicator-service/ar.log Federation (LM)
/var/log/policy/localhost_access_log.txt Policy realization, AAA(Auth)
/var/log/proxy/proxy-tomcat-wrapper.log AAA (Auth), Common - proxy service logs
/var/log/proxy/keystore.log AAA (Auth)
/var/log/proton/localhost_access_log.txt AAA (Auth)
/var/log/intelligence-upgrade-coordinator/localhost_access_log.txt AAA (Auth)
/var/log/phonehome-coordinator/localhost_access_log.txt AAA (Auth)
/var/log/upgrade-coordinator/localhost_access_log.txt AAA (Auth)
/var/log/cm-inventory/localhost_access_log.txt AAA (Auth)
/var/log/core Cores generated
/var/log/proton/proton-tomcat-wrapper.log Common - proton service logs
/var/log/proton/proton_restart.log Common - proton service logs
/var/log/proton/gc.log Common - Proton Garbage Collection
/var/log/proton/activity-stats.log Common - Proton purge related activities
/var/log/proxy/gc.log Common - Proxy Garbage Collection
/var/log/policy/policy_restart.log Common - proton service logs
/var/log/policy/policy-tomcat-wrapper.log Common - policy service logs
/var/log/vmware/top-cpu.log Common - Appliance Health
/var/log/vmware/top-mem.log Common - Appliance Health
/var/log/resume-upgrade.log Upgrade
/var/log/upgrade-coordinator/localhost_access_log.txt Upgrade Coordinator
/var/log/stats Common - ip, memory, thread stats
/var/log/phonehome-coordinator/phonehome-audit-log.txt.0 Telemetry

NSX Edge Support Bundle

File Path Features Using the File Path
/var/log/syslog All
/var/log/lb/<LB_UUID>/logs/error.log Load Balancer
/var/log/lb/<LB_UUID>/logs/ acess_vipid.log
/var/log/lb/<LB_UUID>/logs/nginx.conf
/var/log/lb/<LB_UUID>/lbconf_gen.log
/var/log/nsx-cli/nsxcli.log
L3VPN
L2VPN
Edge HA
Upgrade
/var/log/core/ Load Balancer
L3VPN
L2VPN
Edge HA
Upgrade
/var/log/rcpm/frr-config.log L3VPN
Upgrade
/var/log/rcpm/frr-reload.log L3VPN
Upgrade
/var/log/proton/nsxapi.log DHCP
/var/log/cloudnet/nsx-ccp.log
/controller/falcon/falcon_dump
/controller/span/config_span_graph_dump
/controller/span/dag_span_graph_dumpContainer_Dfw_Canary
/controller/mediator/mediator_dump
/controller/data/data_dump
/edge/dns-forwarder DNS
/edge/dns_fdr-all
/edge/service_binding
/var/log/nvpapi/api_server.log Edge Install
Upgrade
Install
/var/log/join_mp.log Edge Install
Upgrade
Install
/var/log/upgrade Upgrade
/var/log/frr/frr.log Upgrade
Openstack
/opt/vmware/nsx-nestdb/bin/nestdb-cli Upgrade
Openstack
/var/log/vmware/top-cpu.log NCP/Openshift/PKS-windows
/var/log/vmware/top-mem.log NCP/Openshift/PKS-windows
/var/log/nginx/access.log Openstack
/var/log/pcm/pcm.log CSM
/var/log/rsyslog.log CSM
/var/log/upgrade/history_date\<>\<>.log CSM
/edge/Lb_UUID/ Load Balancer
/edge/fw-if-ruleset/
/edge/lb-*

NSX Application Platform Support Bundle

Beginning with version 3.2, the following support bundles include log information for the features that NSX Application Platform hosts. These features are NSX Intelligence, NSX Network Detection and Response, NSX Malware Prevention, and NSX Metrics
File Path Features Using the File Path
/var/log/napp/supportbundle/platform_service_dbg.log NSX Application Platform
/var/log/napp/supportbundle/<K8s_worker_node_name>/kafka*.log NSX Application Platform
/var/log/napp/supportbundle/<K8s_worker_node_name>/zookeeper*.log NSX Application Platform
/var/log/napp/supportbundle/<K8s_worker_node_name>/ spark-app-rawflow-driver*.log NSX Application Platform
/var/log/napp/supportbundle/<K8s_worker_node_name>/authserver*.log NSX Application Platform
/var/log/napp/supportbundle/<K8s_worker_node_name>/cluster-api*.log NSX Application Platform
/var/log/napp/supportbundle/<K8s_worker_node_name>/common-agent*.log NSX Application Platform
/var/log/napp/supportbundle/<K8s_worker_node_name>/projectcontour*.log NSX Application Platform
/var/log/napp/supportbundle/<K8s_worker_node_name>/routing-controller*.log NSX Application Platform
/var/log/napp/supportbundle/<K8s_worker_node_name>/trust-manager*.log NSX Application Platform
/var/log/napp/supportbundle/<K8s_worker_node_name>/upgrade-coordinator*.log NSX Application Platform

/var/log/napp/supportbundle/<K8s_worker_node_name>/postgresql*.log

NSX Application Platform
/var/log/napp/supportbundle/<K8s_worker_node_name>/visualization*.log NSX Intelligence Visualization
/var/log/napp/supportbundle/<K8s_worker_node_name>/recommendation*.log NSX Intelligence Recommendation
/var/log/napp/supportbundle/<K8s_worker_node_name>/rawflowcorrelator*.log NSX Intelligence
/var/log/napp/supportbundle/<K8s_worker_node_name>/ overflowcorrelator*.log NSX Intelligence
/var/log/napp/supportbundle/<K8s_worker_node_name>/*druid*.log NSX Intelligence
/var/log/napp/supportbundle/<K8s_worker_node_name>/nsx-config*.log NSX Intelligence
/var/log/napp/supportbundle/<K8s_worker_node_name>/redis*.log NSX Intelligence
/var/log/napp/supportbundle/<K8s_worker_node_name>/minio*.log NSX Intelligence
/var/log/napp/supportbundle/<K8s_worker_node_name>/nsx-ndr*.log NSX Network Detection and Response
/var/log/napp/supportbundle/<K8s_worker_node_name>/sa-*.log NSX Malware Prevention
/var/log/napp/supportbundle/<K8s_worker_node_name>/malware*.log NSX Malware Prevention
/var/log/napp/supportbundle/<K8s_worker_node_name>/metrics*.log NSX Metrics

NSX-T Data Center Global Manager Support Bundle

File Path Features Using the File Path
/var/log/global-manager/gmanager.log Grouping
/var/log/gm.log AAA (auth)
/var/log/async-replicator- ar.log Federation
/var/log/nvpapi/api_access.log Federation
/var/log/connections.log Federation
/var/logdata-log.log Federation