Splunk® App for VMware (Legacy)

Release Notes

Acrobat logo Download manual as PDF


On August 31, 2022, the Splunk App for VMware will reach its end of life. After this date, Splunk will no longer maintain or develop this product. The functionality in this app is migrating to a content pack in Data Integrations. Learn about the Content Pack for VMware Dashboards and Reports.
This documentation does not apply to the most recent version of Splunk® App for VMware (Legacy). For documentation on the most recent version, go to the latest release.
Acrobat logo Download topic as PDF

Splunk for VMware features

In this release of the Splunk App for VMware we provide a completely new back-end model for collecting data from your VMware environment and bringing that data into Splunk. The new data collection technique supports an easily scalable and maintainable environment.

The app continues to target the proactive monitoring and troubleshooting of your environment. You can identify issues quickly and easily and drill down to those issues using the dashboards.

Features of this release:

  • A data collection engine, written in python, that makes calls to the VMware API.
  • Data collection directly from vCenter. We no longer make direct calls to ESXi hosts.
  • ESXi log data collection directly from the ESXi hosts using Syslog.
  • A user interface driven data collection configuration process that has simplified the installation and configuration of the app.
  • A scheduler that manages the distribution of data collection jobs to data collection nodes (previously the Forwarder Appliance Virtual Machine). The scheduler can be configured from a single configuration dashboard and implements fault tolerance and load balances data collection across nodes.
  • Pre-built views showing tasks associated with hosts and events associated with data health, inventory views where you can monitor the components of your VMware environment, and performance views where you can monitor the performance of your hosts and virtual machines.
  • Default thresholds set for the VMware performance metrics collected by the app. The default number collected is approximately 24. You can easily configure the thresholds in the app to work for your specific environment or you can manually edit the sa_threshold.conf file.
Last modified on 26 July, 2013
  NEXT
Where to get Splunk for VMware

This documentation applies to the following versions of Splunk® App for VMware (Legacy): 3.0


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters