Know the different files collected when you download a support bundle and the features that store logs in these file paths.

NSX Node Support Bundle

File Path Features Using the File Path
/var/log/syslog All
/var/log/nsx-audit.log All
/var/log/policy/policy.log All
/var/log/policy/policy_restart.log All
/var/log/policy/policy-tomcat-wrapper.log All
/var/log/proton/activity-stats.log All
/var/log/proton/gc.log All
/var/log/proton/localhost_access_log.txt All
/var/log/proton/nsxapi.log All
/var/log/proton/proton_restart.log All
/var/log/proton/proton-tomcat-wrapper.log All
/var/log/proton-tomcat/nsxapi.log All
/var/log/proxy/gc.log AAA (Auth)
/var/log/proxy/keystore.log AAA (Auth)
/var/log/proxy/localhost.log AAA (Auth)
/var/log/proxy/localhost_access_log.txt AAA (Auth)
/var/log/proxy/proxy-tomcat-wrapper.log AAA (Auth)
/var/log/proxy/reverse-proxy.log AAA (Auth)
/var/log/phonehome-coordinator/localhost_access_log.txt Alarm Event Framework, Telemetry, Notification Framework, Capacity Dashboard
/var/log/phonehome-coordinator/phonehome-audit-log.txt.0 Alarm Event Framework, Telemetry, Notification Framework, Capacity Dashboard
/var/log/phonehome-coordinator/phonehome-coordinator.log Alarm Event Framework, Telemetry, Notification Framework, Capacity Dashboard
/var/log/cbm/cbm.log Clustering
/var/log/cm-inventory/localhost_access_log.txt CM-inventory (Compute Manager)
/var/log/vmware/top-cpu.log Common - Appliance Health
/var/log/vmware/top-mem.log Common - Appliance Health
/var/log/stats Common - IP, memory, thread stats
/var/log/cloudnet/nsx-ccp-transaction.log Controller
/var/log/cloudnet/nsx-ccp.log Controller
/var/log/core Cores generated
/var/log/corfu/corfu.9000.log Corfu DB
/var/log/corfu/corfu-compactor-audit.log Corfu DB
/var/log/corfu-nonconfig/corfu.9040.log Corfu DB
/var/log/corfu-nonconfig/nonconfig-corfu-compactor-audit.log Corfu DB
/var/log/cloudnet/nsx-ccp.log DNS, Upgrade, IPDiscovery, Groups
/var/log/cm-inventory/cm-inventory.log Endpoint Security, Deployment, NSX Edge Install, Vmotion, Inventory, NCP/Openshift/PKS-windows, Install/Host Upgrade, Install
/var/log/migration-coordinator/v2t/cm.log Endpoint Security (V2T Migration), V2T
/var/log/async-replicator-service/ar.log Federation (Local Manager)
/var/log/proton/nsx-common-dashboard.log NCP/Openshift/PKS-windows
/var/log/search/elasticsearch_index_indexing_slowlog.log NCP/Openshift/PKS-windows
/var/log/search/search-policy.log NCP/Openshift/PKS-windows
/var/run/log/nsxaVim.log Stateless Hosts/ Transport Node Profile
/var/log/policy/localhost_access_log.txt Policy realization
/var/log/search/elasticsearch.log UI
/var/log/intelligence-upgrade-coordinator/localhost_access_log.txt Upgrade
/var/log/upgrade Upgrade
/var/log/resume-upgrade.log Upgrade
/var/log/upgrade-coordinator/localhost_access_log.txt Upgrade
/var/log/upgrade-coordinator/upgrade-coordinator.log Upgrade
/var/log/nvpapi/api_server.log Upgrade, BnR
/var/log/upgrade-coordinator/localhost_access_log.txt Upgrade Coordinator
/var/log/migration-coordinator/v2t/summary.log V2T (NSX-V to NSX)
/var/log/migration-coordinator/migration-coordinator.log V2T (NSX-V to NSX)

NSX Edge Support Bundle

File Path Features Using the File Path
/var/log/syslog All
/controller/data/data_dump DHCP
/controller/falcon/falcon_dump DHCP
/controller/span/config_span_graph_dump DHCP
/controller/span/dag_span_graph_dumpContainer_Dfw_Canary DHCP
/controller/mediator/mediator_dump DHCP
/var/log/cloudnet/nsx-ccp.log DHCP
/var/log/proton/nsxapi.log DHCP
/edge/dns_fdr-all DNS
/edge/dns-forwarder DNS
/edge/service_binding DNS
/var/log/join_mp.log Edge Install, Install, Upgrade
/edge/fw-if-ruleset/ Load Balancer
/edge/Lb_UUID/ Load Balancer
/edge/lb-* Load Balancer
/var/log/lb/<LB_UUID>/logs/error.log Load Balancer
/var/log/lb/<LB_UUID>/logs/ acess_vipid.log Load Balancer
/var/log/lb/<LB_UUID>/logs/nginx.conf Load Balancer
/var/log/lb/<LB_UUID>/lbconf_gen.log Load Balancer
/var/log/core/ Load Balancer, L3VPN, L2VPN, Edge HA, Upgrade
/var/log/nsx-cli/nsxcli.log L3VPN,L2VPN,Edge HA, Upgrade
/var/log/rcpm/frr-config.log L3VPN, Upgrade
/var/log/rcpm/frr-reload.log L3VPN, Upgrade
/var/log/vmware/top-cpu.log NCP/Openshift/PKS-windows
/var/log/vmware/top-mem.log NCP/Openshift/PKS-windows
/var/log/frr/frr.log Openstack, Upgrade
/opt/vmware/nsx-nestdb/bin/nestdb-cli Openstack, Upgrade
/var/log/nginx/access.log Openstack
/var/log/upgrade Upgrade
/var/log/nvpapi/api_server.log Upgrade, BnR

NSX Application Platform Support Bundle

The following support bundles include log information for the features that NSX Application Platform hosts. These features are Security Intelligence, NSX Network Detection and Response, NSX Malware Prevention, and NSX Metrics.
File Path Features Using the File Path
/var/log/napp/supportbundle/platform_service_dbg.log NSX Application Platform
/var/log/napp/supportbundle/<K8s_worker_node_name>/kafka*.log NSX Application Platform
/var/log/napp/supportbundle/<K8s_worker_node_name>/zookeeper*.log NSX Application Platform
/var/log/napp/supportbundle/<K8s_worker_node_name>/ spark-app-rawflow-driver*.log NSX Application Platform
/var/log/napp/supportbundle/<K8s_worker_node_name>/authserver*.log NSX Application Platform
/var/log/napp/supportbundle/<K8s_worker_node_name>/cluster-api*.log NSX Application Platform
/var/log/napp/supportbundle/<K8s_worker_node_name>/common-agent*.log NSX Application Platform
/var/log/napp/supportbundle/<K8s_worker_node_name>/projectcontour*.log NSX Application Platform
/var/log/napp/supportbundle/<K8s_worker_node_name>/routing-controller*.log NSX Application Platform
/var/log/napp/supportbundle/<K8s_worker_node_name>/trust-manager*.log NSX Application Platform
/var/log/napp/supportbundle/<K8s_worker_node_name>/upgrade-coordinator*.log NSX Application Platform

/var/log/napp/supportbundle/<K8s_worker_node_name>/postgresql*.log

NSX Application Platform
/var/log/napp/supportbundle/<K8s_worker_node_name>/visualization*.log Security Intelligence Visualization
/var/log/napp/supportbundle/<K8s_worker_node_name>/recommendation*.log Security Intelligence Recommendation
/var/log/napp/supportbundle/<K8s_worker_node_name>/rawflowcorrelator*.log Security Intelligence
/var/log/napp/supportbundle/<K8s_worker_node_name>/ overflowcorrelator*.log Security Intelligence
/var/log/napp/supportbundle/<K8s_worker_node_name>/*druid*.log Security Intelligence
/var/log/napp/supportbundle/<K8s_worker_node_name>/nsx-config*.log Security Intelligence
/var/log/napp/supportbundle/<K8s_worker_node_name>/redis*.log Security Intelligence
/var/log/napp/supportbundle/<K8s_worker_node_name>/minio*.log Security Intelligence
/var/log/napp/supportbundle/<K8s_worker_node_name>/nsx-ndr*.log NSX Network Detection and Response
/var/log/napp/supportbundle/<K8s_worker_node_name>/sa-*.log NSX Malware Prevention
/var/log/napp/supportbundle/<K8s_worker_node_name>/malware*.log NSX Malware Prevention
/var/log/napp/supportbundle/<K8s_worker_node_name>/metrics*.log NSX Metrics

NSX Global Manager Support Bundle

File Path Features Using the File Path
/var/logdata-log.log Federation
/var/log/async-replicator- ar.log Federation
/var/log/connections.log Federation
/var/log/gm.log Federation
/var/log/nvpapi/api_access.log Federation
/var/log/global-manager/gmanager.log Grouping