host_log_scan
Scan recent ESXi host syslog lines to detect error and warning patterns, revealing root causes of host issues when vCenter events are inconclusive.
Instructions
[READ] Scan recent ESXi host syslog lines for error/warning patterns.
Reads the last lines entries of the hostd/vmkernel/vpxa logs via the
diagnostic system and returns only the lines matching known trouble patterns
(error, fail, critical, panic, lost access, timeout, …). Returns the list
envelope {items, returned, limit, total, truncated, hint}; each row has
severity, source (host_log:<key>), message, time and entity. total is
null on purpose — this is "errors within the scanned window", not all errors
ever, and empty items means nothing matched.
Use this when get_events or host_investigation_bundle show a host in trouble
but not why: vCenter events and ESXi syslog are different sources. Filter
with host_name to keep the scan fast on large clusters.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| lines | No | How many recent lines per log to scan (default 500). | |
| target | No | vCenter/ESXi target from config (default if omitted). | |
| host_name | No | Filter to a single host by exact name (None = all hosts). |