But in that file I can't see the "path" followed by a VM through VMotion, so I have to check vmkernel log file from all ESX hosts. Is that correct?
Another question is, there is a Id assigned to each operation on virtual machines? If so, it could be a way for tracking vmotion operations though ESX hosts.
By the way, here is a PowerCLI OneLine to retreieve all operations on a specific VM from vmkernel logs on all ESX hosts:
foreach ($vmhost in Get-VMHost) { write-host $vmhost.Name; (get-log vmkernel -vmhost $vmhost).entries | Select-String 'virtual_machine_name' }
