here’s how to view history command on ESX/ESXi
- In ESXi 5.x, the shell commands are logged in the shell.log file located at /var/log/.
- In ESXi 4.x, the shell commands are logged in the messages log file. To view the shell commands, run this command:
grep shell /var/log/messages
- In ESX, you can find the commands that were run by using the history command. This information is also available in the /root/.bash_history file.
Note: The .bash_history file is not included when gathering a host support bundle. If you want VMware Support to analyze the .bash_history file, copy it manually and attach it to your Support Request.