Architecting a VMware NSX Solution : Operational Considerations : 11.3 NSX Distributed Firewall Operational Considerations : 11.3.2 VMware NSX Distributed Firewall Log Location
   
11.3.2 VMware NSX Distributed Firewall Log Location
VMware NSX for vSphere 6.0.x:
/var/log/vmkernel.log file on the ESXi host.
/var/log/vsfwd.log file on the ESXi host.
VMware NSX for vSphere 6.1.x and later:
/var/log/vmkernel.log file on the ESXi host.
/var/log/dfwpktlogs.log file on the ESXi host
/var/log/vsfwd.log file on the ESXi host