Skip to main content

SDDC Manager Command line overview-part 1

In this blog, we will discuss about sddc manager and what are the command line options we have what we can do in command line.

Sddc manager is the core component in VCF environment.

It is responsible for doing many different tasks related to your VCF inventory configuration, life cycle management, security etc.

  • Commission/decommission the hosts
  • Deploying new workload domains 
  • Expanding the clusters or adding new clusters to workload domain
  • Configure network pools for host networks (Management, Storage(VSAN/NFS etc)
  • Deploying vRealize suite of products
  • Certificate and password management 
  • Life cycle Management
  • NSX-T Edge/AVNs deployment

Usually all these tasks can be carried out from GUI, VCF admins rarely login sddc manager mostly when the VMware GSS is involved.

SDDC Manager command line provides different use cases for example:

  • monitoring the logs 
  • looking up for passwords
  • collecting logs
  • do command line health checks etc

How to access sddc manager CLI?

There are two users vcf user and root user.
when we take SSH session from putty or SSH client tools , we cannot directly login with root user.
First you need to login with vcf user and then change to root.

example:











Please note that vcf user can be able to run most of the commands, change to root user only when it is necessary.


How to unlock vcf user account if it is locked out due to incorrect password attempts.

We can use pam_tally2 tool to unlock the user account.
This tool will work with root user only
Access the SDDC Manager VM virtual console and login as root there then you can run the below commands to check and unlock vcf user.











What are the different logs in SDDC Manager?

There are many logs are available in sddc manager to investigate and monitor different tasks/workflows.
Most frequently used logs are available in the below folder '/var/log/vmware/vcf'










we are not going to discuss all the logs here, we will talk about the most commonly used logs.

Lcm logs:
Lcm logs are greatly helpful to check multiple things related to Life cycle management of VCF environment.
  • Bundle downloads
  • Upgrade pre-check errors
  • Ongoing upgrade status 
  • Upgrade errors 
  • VMware or DellEMC Depot connectivity issues
Important logs to focus here is: lcm.log and lcm-debug.log

precheck related events in lcm-debug.log



Bundle download and availability related events







Operation manager logs:
  • Host commission/decommission
  • Password update/remediate issues
  • Certificate management 
  • Sddc manager and nsxt backup configuration
  • Sftp server(for file backup of sddc manager and nsxt) connection issues 









Logs related to host commissioning:














Logs related to backup configuration, by default sddc manager backups are configured INTERNAL, we need to configure external SFTP server to take automatic backup at regular intervals







Logs related to password rotation:








Domain manager logs:
We can check the logs for all activities related to workload domain with VCF environment in domainmanager logs
  • Adding a new workload domain
  • Add new cluster or delete a cluster from existing domain
  • Add or remove host 
  • vRLCM integration
  • NSX-T Edge/AVN deployment activities

Logs related to VI domain creation:












Logs related to cluster creation:







Popular posts from this blog

SDDC Manager Command line overview-part 2

Welcome back. Hope you all doing great. In the previous blog   we discussed about how to access sddc manager, what are the different logs in sddc manager. In this blog we will discuss about SOS tool. There is a tool called SOS (Supportability and serviceability utility) tool in sddc manager  It is available in this location /opt/vmware/sddc-support To run sos tool you need to change as root or run with sudo  When you run sos tool with -h (--help) option it will show tool usage ./sos --help Sos tool is useful to do multiple tasks, we will look into following examples to understand SOS and its usage. Health checks  Log collection Enable disable ssh for esxi nodes or vcenter servers Get host IP address details  -- Running health check for a specific workload domain, if you didn’t specify the domain-name option then health check will run on all the available workload domains. ./sos --health-check --domain-name nameofthedomain Once the health check completes, it...