{ "$schema": "https://lnav.org/schemas/format-v1.schema.json", "vmw_log": { "title": "VMware Logs", "description": "One of the log formats used in VMware's ESXi and vCenter software.", "url": "https://kb.vmware.com/kb/2004201", "regex": { "6.0+": { "pattern": "^(?:\\[#\\d+\\] )?(?\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}(?:Z|[-+]\\d{2}:\\d{2})) (?\\w+)(?:\$\\d+\$+)? (?[\\w\\-]+)\\[(?\\w+)\\]:? (?:\\w+ -\\[\\d+\\] )?\\[(?\\w+@\\d+)(?:\\s+sub=(?_{.*?(?!\\w+=)))?(?:\\s+item=(?[\\w\\.\\-@/:]+))?(?: req=(?[^ \\]]+))?(?: opI(?:D|d)=(?(?:req=)?[\\w@ \\-\\.:]+?(?!\\w+=)))?(?: sid=(?[^ \\]]+))?(?: user=(?[^ \\]<]+(?:<[^>]+>)?))?(?: update=(?\\d+))?(?:\\s+reason=(?[^\\]]+))?\\]\\s*(?.*)$"
},
"6.0+-nosrc": {
"pattern": "^(?\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}(?:Z|[-+]\\d{2}:\\d{2})) (?\\w+)(?:\$\\d+\$+)? (?[\\w\\-]+)\\[(?\\w+)\\]:? \\[(?:opI(?:D|d)=(?[^\\]]+))\\]\\s*(?.*)$"
},
"section": {
"pattern": "^(?\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}(?:Z|[-+]\\d{2}:\\d{2})) (?:- last log rotation time, \\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}(?:Z|[-+]\\d{2}:\\d{2}))?\\s*(ESX KMX Agent started.|(?:- time the service was last started(?: \\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}.\\d{3}Z)?, )?Section for (?:[^,]+), pid=(?\\w+).*)"
},
"esx-section": {
"pattern": "^(?\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}(?:Z|[-+]\\d{2}:\\d{2})) (?\\w+)(?:\$\\d+\$+) (?[\\w\\-]+)\\[(?\\w+)\\]: (?:Logs rotated. \\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}(?:Z|[-+]\\d{2}:\\d{2}))?(?:- last log rotation time, \\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}(?:Z|[-+]\\d{2}:\\d{2}))?\\s*(ESX KMX Agent started.|(?:- time the service was last started(?: \\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}.\\d{3}Z)?, )?Section for (?:[^,]+), pid=(?:\\w+).*)"
},
"5.0+": {
"pattern": "^(?\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}(?:Z|[-+]\\d{2}:\\d{2})) \\[(?\\w+) (?\\w+) '(?[^']+)'(?: opID=(?[^ \\]]+))?(?: user=(?[^ \\]]+))?\\](?.*)(?:\\n.*)?$"
},
"pre-5.0": {
"pattern": "^\\[(?\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2}\\.\\d{3}) (?\\w+) (?\\w+) '(?[^']+)'(?: opID=(?[^ \\]]+))?(?: user=(?[^ \\]]+))?\\](?.*)(?:\\n.*)?$"
},
"ls-log": {
"pattern": "^\\[(?\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2},\\d{3}) (?[\\w\\-]+)\\s+(?\\w+)\\s+(?[^\\]]+)\\]\\s+(?.*)"
},
"hdr-ftr": {
"pattern": "^(?\\d{4}-\\d{2}-\\d{2}(T| )\\d{2}:\\d{2}:\\d{2}(?:.|,)\\d{3}(?:Z|[-+]\\d{2}:\\d{2})) \\[(?[^\\[]+)\\[(?\\w+)\\]:\\s+(?.*)\\]$"
},
"pylog": {
"pattern": "^(?\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d{3})?(?:Z|[-+]\\d{2}:\\d{2})) (?[^:]+):\\s+(?\\d+):\\s+(?[^:]+):(?\\d+)?\\s+(?\\w+):?\\s+(?.*)(?:\\n.*)?$"
},
"vum-log4cpp": {
"pattern": "^\\[(?\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2}:\\d{3}) '(?[^']*)' (?\\d+) (?[a-zA-Z]+)\\]\\s+(?>\\[(?\\S+), (?\\d+)\\])? (?.*$)"
},
"pylog2": {
"pattern": "^(?[^:]+):(?\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2},\\d{3})\\[(?\\w+)\\](?[^:]+):(?\\d+) \\[(?[a-zA-Z]+)\\]\\s+(?.*)$"
},
"pylog3": {
"pattern": "^(?[^:]+): (?\\d+): (?\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2},\\d{3}) (?[^:]+):(?\\d+) (?[a-zA-Z]+)\\s+(?.*)$"
}
},
"level-field": "level",
"level": {
"info": "^(?i)(?:info|In)$",
"debug": "^(?i)(?:debug|Db)$",
"error": "^(?i)(error|Er)$",
"warning": "^(?i)(warning|warn|Wa)$",
"trace": "^(?i)verbose$",
"critical": "^(?i)(?:crit|Cr)$",
"fatal": "^(?i)(?:alert|fatal|panic|Al|Em)$"
},
"opid-field": "opid",
"value": {
"prc": {
"kind": "string",
"identifier": true
},
"tid": {
"kind": "string",
"identifier": true
},
"src": {
"kind": "string",
"identifier": true
},
"comp": {
"kind": "string",
"identifier": true
},
"line": {
"kind": "integer",
"identifier": true
},
"sub": {
"kind": "string",
"identifier": true
},
"item": {
"kind": "string",
"identifier": true
},
"opid": {
"kind": "string",
"identifier": true
},
"req": {
"kind": "string",
"identifier": true
},
"sid": {
"kind": "string",
"identifier": true
},
"user": {
"kind": "string",
"identifier": true
},
"vpxa_update": {
"kind": "integer",
"identifier": true
},
"reason": {
"kind": "string"
},
"file": {
"kind": "string",
"identifier": true
}
},
"search-table": {
"vpxd_session_stats": {
"pattern": "/SessionStats/SessionPool/Session/Id='(?[^']+)'/Username='(?[^']+)'/ClientIP='(?[^']+)'(?[^ ]+) (?[^\\n]+)",
"glob": "*/vpxd-profile*"
},
"vpxd_session_pool_stats": {
"pattern": "/SessionStats/SessionPool/Id='(?[^']+)'/Username='(?[^']+)'(?[^ ]+) (?[^\\n]+)",
"glob": "*/vpxd-profile*"
},
"vpx_lro_begin": {
"pattern": "\\[VpxLRO\\] -- BEGIN (?\\S+) -- (?\\S*) -- (?\\S*) -- (?:(?[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:\$(?[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\$)?)?"
},
"vpx_lro_finish": {
"pattern": "\\[VpxLRO\\] -- FINISH (?\\S+)"
},
"vpx_lro_error": {
"pattern": "\\[VpxLRO\\] -- ERROR (?\\S+) -- (?:(?[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:\$(?[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\$)?)? -- (?\\S*) -- (?\\S*):\\s*(?.*)",
"level": "error"
}
},
"tags": {
"test-failure": {
"description": "Tag for gtest test-case failures",
"paths": [
{
"glob": "*/test.log"
}
],
"pattern": "^Expected equality of these values:"
}
},
"sample": [
{
"line": "2021-05-24T20:31:05.671Z - last log rotation time, 2021-05-24T09:30:02.683Z - time the service was last started, Section for VMware ESX, pid=1000080910, version=7.0.3, build=0, option=DEBUG"
},
{
"line": "[2011-04-01 15:14:34.203 F5A5AB90 info 'vm:/vmfs/volumes/4d6579ec-23f981cb-465c-00237da0cfee/Vmotion-test/Vmotion-test.vmx' opID=F6FC49D5-000007E6-d] VMotionPrepare: dstMgmtIp=10.21.49.138"
},
{
"line": "2014-11-04T15:53:31.075+05:30 verbose vpxd[05160] [Originator@6876 sub=PropertyProvider opID=ProcessAlarmFiring-427c3c55] RecordOp ASSIGN: declaredAlarmState[\"alarm-1.host-23\"], host-23. Applied change to temp map."
},
{
"line": "2020-05-11T22:32:22.932Z [/etc/init.d/vvold[1000211787]: WaitVvoldToComeUp /var/run/vmware/.vmware-vvol.started created]"
},
{
"line": "2020-05-11T22:32:22.736Z info -[1000212040] [Originator@6876 sub=Default] Successfully registered SIGHUP handler"
},
{
"line": "2014-01-17T04:55:50.347Z [7F03ECE76700 verbose 'Default' opID=2140bc71] [VpxVmomi] Invoke done: vmodl.query.PropertyCollector.waitForUpdatesEx session: c580b3ef-0011-88a5-b2af-7ca7e74114c8"
},
{
"line": "2014-11-04T12:46:42.990+05:30 Section for VMware VirtualCenter, pid=6432, version=6.0.0, build=2255588, option=BETA"
},
{
"line": "[2013-01-16 02:26:25,500 pool-3-thread-1 INFO com.vmware.vim.license.service.impl.ServiceImpl] License Accounting Service initialized"
},
{
"line": "2020-05-11T22:32:38.751Z info vsansystem[1000212707] [Originator@6876 sub=Libs opId=vsan-d810] VsanConfigStore: Get object host from vsan"
},
{
"line": "2020-05-11T22:32:56Z lifecycle: 1000212917: lifecyclectl:58 ERROR Failed to delete pidfile(/var/vmware/lifecycle/lifecycle.apply.pid) at boot Traceback (most recent call last): File \"/usr/lib/vmware/lifecycle/bin/lifecyclectl.py\", line 55, in main os.remove(PID_APPLY_FILE) FileNotFoundError: [Errno 2] No such file or directory: '/var/vmware/lifecycle/lifecycle.apply.pid'"
},
{
"line": "2020-05-11T22:32:09Z esxupdate: 1000211352: root: INFO: Command = profile.setacceptance"
},
{
"line": "2020-05-11T22:36:11.202Z verbose hostd[1000212678] [Originator@6876 sub=Vimsvc.Ticket 52 66 af 87 76 b0 ab 21-dd 2b 28 27 3a 39 fd fd opID=ec9d7fe8] Ticket issued for root"
},
{
"line": "[2020-05-26 19:46:43:259 'ConfigurationMgr' 139700477753600 INFO] [configurationMgr, 155] Configuration manager created...vcidbInit"
},
{
"line": "HsmService:2021-05-19 17:36:35,978[MainThread]hsmService:737 [INFO] HSM Service is initialized"
},
{
"line": "ImageService: 139853338433792: 2021-05-19 17:36:35,675 imageService:769 INFO Image service is initialized"
},
{
"line": "2021-06-03T16:50:32.890Z - time the service was last started 2021-06-03T16:50:32.884Z, Section for VMware Update Manager, pid=5916, version=7.0.3, build=0, option=DEBUG"
},
{
"line": "2021-06-16T14:59:52.362Z info vsand[1000083783] [opID=MainThread VsanMgmtSvcMain::_PatchPyVmomi] Python 3.8.8 (default, Jun 1 2021, 03:16:39) [GCC 4.6.3] on VMkernel, optimize: 0, recursionLimit: 300"
},
{
"line": "2022-06-01T13:24:08.243Z Section for vdtc, pid=4774, version=e.x.p, build=19889761, option=Release"
},
{
"line": "2022-06-02T12:21:26.285Z info vmware-vum-server[00932] [Originator@6876 sub=SessionAuthData reason=Timeout expired] [vciSessionAuthData 94] Session [521601f2-6eb3-0475-7be8-c30eed1040ab] is closed"
},
{
"line": "2022-06-01T20:17:31.352Z info vpxd[27059] [Originator@6876 sub=drmLogger item=FixNIOCViolation opID=SWI-5441881e] FixNIOCViolation worker starts for host [vim.HostSystem:host-588,esx-3-23.vlcm.com]"
},
{
"line": "2022-06-01T14:23:06.536Z info vpxd[27349] [Originator@6876 sub=Http2Session #28] Starting a Http2Session (server): , >"
},
{
"line": "2022-06-02T08:34:54.811Z info vpxd[44568] [Originator@6876 sub=SoapAdapter[0].HTTPService] Max buffered response size is 104857600 bytes"
},
{
"line": "2022-06-02T08:34:55.613Z info vpxd[44568] [Originator@6876 sub=SSL SoapAdapter[1].HTTPService] Max buffered response size is 104857600 bytes"
},
{
"line": "2022-06-02T08:34:55.753Z info vpxd[44568] [Originator@6876 sub=Req@vsan/VMC M5] Created version logger for vsan/VMC M5 (vsan.version.version8)"
},
{
"line": "2022-06-02T08:34:55.421Z info vpxd[44568] [Originator@6876 sub=Req@vsan/vSAN 7.0U2] Created version logger for vsan/vSAN 7.0U2 (vsan.version.version16)"
},
{
"line": "2022-06-02T08:33:42.327Z info StatsMonitor[40881] [Originator@6876 sub=LinuxStatsProvider(00005575a7a395f0)] Created"
},
{
"line": "2022-06-02T08:33:42.692Z info rhttpproxy[40998] [Originator@6876 sub=WorkQueue.rhttpproxy.packetsniffer[0000562e3c06fee0].queue] Created: WorkQueue.rhttpproxy.packetsniffer[0000562e3c06fee0].queue, type = serial, priority = 16, itemWeight = 1"
},
{
"line": "2022-06-02T02:56:51.118Z Db(167) Hostd[1001392583]: [Originator@6876 sub=AdapterServer] Vdt span started, activation is <<527066d1-5c96-4854-ebdb-fec666747e0e, , >, ha-root-pool, vim.ManagedEntity.GetName>, method name is GetName",
"level": "debug"
},
{
"line": "2022-06-02T02:56:51.640Z In(14) vmsyslogd[1001390391]: Logs rotated. 2022-06-02T02:54:42.721Z - time the service was last started 2022-06-02T02:54:42.708Z, Section for VMware ESX, pid=1001391976, version=8.0.0, build=19833347, option=BETA"
},
{
"line": "2022-06-02T02:15:22.987Z In(166) Hostd[1001392061]: info -[1001392061] [Originator@6876 sub=Default] Supported VMs 640"
},
{
"line": "2022-06-02T03:20:05.107Z Db(167) Hostd[1001392035]: [Originator@6876 sub=AdapterServer opID=531c52d7-9d8a sid=52806149 user=vpxuser:] New request: target='vim.HostSystem:ha-host', method='retrieveInternalCapability', session='52806149-fe15-f6ff-7685-353ae5d93dcc'"
}
]
}
}}