Install and configure the Splunk Add-on for VMware Indexes

The Splunk Add-on for VMware Indexes contains the definition of the indexes that are required for the ingestion of the data collected by Splunk Add-on for VMware, Splunk Add-on for VMware ESXi Logs, and Splunk Add-on for vCenter Logs. Install and configure the add-on on the indexer tier to create the VMware-specific indexes in your environment.

Follow the instructions for your environment type.

Install and configure the Splunk Add-on for VMware Indexes in an on-premises environment

If you have an indexer in an on-premises environment, follow these steps on the indexer to install the package in your environment.

Install in a clustered indexer deployment

1. Enable maintenance mode on the cluster master node.
2. Download the Splunk Add-on for VMware Indexes from Splunkbase.
3. Extract the SA-VMWIndex package to the $SPLUNK_HOME/etc/master-apps directory.
4. Push the configuration bundle from the cluster master node.
5. Disable the maintenance mode on the cluster master node.

Once you have completed the installation, the indexes are visible and searchable. No additional steps are required for configuration.

Install in a non-clustered indexes deployment

1. Stop your Splunk indexer instance.
2. Download the Splunk Add-on for VMware Indexes from Splunkbase.
3. Extract the SA-VMWIndex package to the $SPLUNK_HOME/etc/apps directory.
4. Start your Splunk indexer instance.

Once you have completed the installation, the indexes are visible and searchable. No additional steps are required for configuration.

Install and configure the Splunk Add-on for VMware Indexes in a cloud environment

1. Log in to your search head.
2. On the Splunk Web home page, click Find More Apps.
3. Search for "Splunk Add-on for VMware Indexes" and click Install.
4. Enter your Splunk.com login credentials, read and accept the terms and conditions, and click Login and Install.
5. Go to Apps > Manage Apps to review the installed app on the Apps page.

Once you have completed the installation, the indexes are visible and searchable. No additional steps are required for configuration.