Download and install Splunk App for VMware

Download Splunk App for VMware

1. Download Splunk App for VMware package from Splunk Apps.

2. Select the license agreement check box.

3. Confirm that the download package file name is splunk_app_for_vmware-<version>-<buildnumber>.zip and that it includes the following files:

• splunk_app_for_vmware-<version>-<build_number>.zip
• splunk_forwarder_for_vmware-<version>-<build_number>.zip
• Splunk_TA_vcenter-<version>-<build_number>.zip
• splunk_data_collection_node_for_vmware_<version>-<build_number>.ova

Install Splunk App for VMware

Install Splunk App for VMware on a single instance of Splunk Enterprise. In a single-instance environment, one host acts as both the indexer and the search head. For instructions on deploying Splunk App for VMware in a search head pooled or clustered indexer environment, see the Configuration Guide.

1. Confirm that you are using the same user account credentials that you used to install Splunk Enterprise.

2. Add the downloaded splunk_app_for_vmware-<version>-<build_number>.zip package to the $SPLUNK_HOME directory to your Splunk Enterprise host.

3. Unzip the Splunk App for VMware package.

cd /opt/splunk unzip splunk_app_for_vmware-*.zip /opt/splunk/bin/splunk restart

4. Verify that you successfully extracted all of the sub-directories in the $SPLUNK_HOME/etc/apps directory.

• SA-Utils/…
• SA-Hydra/…
• SA-Threshold/…
• SA-VMW-HierarchyInventory/…
• SA-VMW-LogEventTask/…
• SA-VMW-Performance/…
• SA-VMW-Licensecheck/…
• Splunk_TA_vcenter/…
• splunk_for_vmware/…
• Splunk_TA_vmware/…
• Splunk_TA_esxilogs/…

5. To address a known issue that produces benign license check error messages, remove the SA-VMW-Licensecheck package from your installation. Copy the vmware_licensecheck.py file from the $SPLUNK_HOME\etc\apps\SA-VMW-Licensecheck\bin folder to the $SPLUNK_HOME\etc\apps\splunk_for_vmware\bin folder.

6. Change the following line in the vmware_licensecheck.py file from:

namespace = 'SA-VMW-Licensecheck'

to

namespace = 'splunk_for_vmware'.

7. Remove the SA-VMW-Licensecheck folder from the $SPLUNK_HOME\etc\apps folder.

8. Restart your instance of Splunk Enterprise. After Splunk Enterprise restarts, assign the user roles.