11.3.2 VMware NSX Distributed Firewall Log Location
VMware NSX for vSphere 6.0.x:
• /var/log/vmkernel.log file on the ESXi host.
• /var/log/vsfwd.log file on the ESXi host.
VMware NSX for vSphere 6.1.x and later:
• /var/log/vmkernel.log file on the ESXi host.
• /var/log/dfwpktlogs.log file on the ESXi host
• /var/log/vsfwd.log file on the ESXi host