Splunk® App for VMware (Legacy)

User Guide

Acrobat logo Download manual as PDF


On August 31, 2022, the Splunk App for VMware will reach its end of life. After this date, Splunk will no longer maintain or develop this product. The functionality in this app is migrating to a content pack in Data Integrations. Learn about the Content Pack for VMware Dashboards and Reports.
This documentation does not apply to the most recent version of Splunk® App for VMware (Legacy). For documentation on the most recent version, go to the latest release.
Acrobat logo Download topic as PDF

ESXi Log Browser

The ESXi Log Browser is a quick and easy way to look at ESX/i logs collected from the host systems. Configure the forwarding of syslog data to Splunk App for VMware.browse the following log data:

  • vCenter server vpxa agent logs (vpxa.log). These logs contain communication information with vCenter Server and the Host Management hostd agent.
  • Syslog management service logs.
  • hostd management service logs (hostd.log). The logs include virtual machine and host Task and Events information, information related to communication between the vSphere Client and the vpxa agent, and they store information about SDK connections.

Use the drop-down lists on the dashboard to filter your search results.

Field Description
Time range The time range over which events are reported.
ESX/i A list of ESX/i hosts from which you are collecting syslog data. The default value is All.
Common Terms Common terms that exist in ESX/i logs. This is a static list of options. HTTP and event are examples of common terms. The default value is Any.
Field/Value Common field values extracted at index time from events. This is a static list of options. The default value is Any.
Error/Fault Common errors of faults that appear in syslog data, classified into a single grouping. The default value is Any.
Managed Objects A list of all objects managed by the vCenter Server. The default value is All.
API Related TA list of all API related search terms that can appear in syslog data. The default value is All.
Component A list of all services running on the the vCenter server. The default value is All.
Sublogger A list of the log listener services installed. The default value is All.
Look for Enter the term that you want to specifically search for in the logs.
Level A logging level. This can be DEBUG, INFO, WARN, ERROR, or FATAL.
Last modified on 22 October, 2021
PREVIOUS
Virtual Machine Snapshots
  NEXT
vCenter Log Browser

This documentation applies to the following versions of Splunk® App for VMware (Legacy): 3.4.1, 3.4.2, 3.4.3, 3.4.4, 3.4.5, 3.4.7, 4.0.0, 4.0.1, 4.0.3


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters