Running vm-support in a console session on ESXi/ESX hosts
vm-support
A compressed bundle of logs is produced and stored in a file with a .tgz extension in one of these locations:
/var/tmp/
/var/log/
The current working directory
To export the log bundle to a shared vmfs datastore, use this command:
vm-support -f -w /vmfs/volumes/DATASTORE_NAME
Note: The -f option is not available in ESXi 5.x, ESXi/ESX 4.1 Update 3, and later.