You can use logs that are in the various NSX components and on the hosts to detect and troubleshoot problems. About NSX LogsYou can configure the syslog server and view technical support logs for each NSX component. Management plane logs are available through NSX Manager and data plane logs are available through vCenter Server. Hence, it is recommended that you specify the same syslog server for the NSX component and vCenter Server in order to get a complete picture when viewing logs on the syslog server. Firewall LogsFirewall generates and stores log files, such as audit log, rules message log, and system event log. You must configure a syslog server for each cluster that has enabled the firewall . The syslog server is specified in the Syslog.global.logHost attribute. NSX Logs Relevant to RoutingThe best practice is to configure all components of NSX to send their logs to a centralized collector, where they can be examined in one place. Guest Introspection LogsThere are several different logs you can capture to use while troubleshooting Guest Introspection.