Installation and Configuration Guide

 


Introduction
Download Splunk for VMware
Install Splunk App for VMware
Install the Splunk Add-on for vCenter
Validate your installation

Audience and Features

Audience and Features

Audience

If you are a Solutions administrator or a Splunk technical user, then this document is for you. You are a sophisticated Splunk user who has a good understanding of Splunk and who has experience working with Splunk configuration files. You may also have some prior knowledge of virtualized environments.

You will download and install Splunk for VMware to work with Splunk. You will configure the Solution components to get the required data from your environment, index it in Splunk, and map it to the dashboards in the Splunk App for VMware.

As a user you:

  • Know your environment and you know your data.
  • Can download and install Splunk for VMware.
  • Will get value from the views and dashboards.
  • Are comfortable working from the command line and working with configuring and managing the components of your environment.

What you should know before using the solution

To get the App working in your environment you should be familiar with:

  • Configuring Splunk files on the command line. It helps if you are familiar with using the Splunk Search Processing Language (SPL) and have some previous knowledge of how indexes, sources, source types, and field extractions work.
  • Splunk and have used it in an enterprise environment before installing and using the Solution. Read the Splunk product documentation for more information on how to get started.
  • VMware and that you understand your VMware infrastructure.

Features

  • Splunk App for VMware now specifically targets the proactive monitoring and troubleshooting of your environment. You can identify issues quickly and easily and drill down to those issues.
    • Use the Selector to navigate your environment. Filter and expand your environment down to the most detailed level.
    • Use the tree view to see your overall environment status and to navigate quickly to issues. With the new bubble up status, you can see the status of your environment at a glance as the status at a lower level in your environment is indicated at the top most level so that you can triage quickly and easily.
    • Use the search capability in the drop-downs to make faster selections. You can make a selection from the list displayed or you can enter text into the menu to get a more direct response.
  • You can reduce your data volume by using the latest data collector App in the FA VM and running the latest enginebuilder.py tool on it to regenerate your configuration files.
  • We have default thresholds set for the VMware performance metrics collected by the App. The default number collected is approximately 24.
    • You can configure the thresholds in the App to work for your specific environment or you can manually edit the sa_threshold.conf file.
  • You can see the health of your environment now by looking at one dashboard, the App Install health Screen.
  • We have integrated some of the older dashboards into the App.
  • We have removed the App dependency on Sideview Utils.
  • We have improved the upgrade process.
  • Automatically Install the App using the configuration tools. No more manual installation.
  • Scaling is easier using the tools.
  • You can get performance metrics directly from the vSphere hosts.
  • It provides data persistence for analysis and trending.
  • Analysis and reporting of vCenter (VC) tasks and events.
  • Easy correlation of virtualization layer data with data from other tiers such as applications or operating system information from inside virtual machines and the supporting hardware.
  • use pre-built views showing tasks associated with hosts and events associated with data health, inventory views where you can monitor the components of your VMware environment, and performance views where you can monitor the performance of your hosts and virtual machines.

This documentation applies to the following versions of VMW: 2.0 View the Article History for its revisions.


You must be logged into splunk.com in order to post comments. Log in now.

Was this documentation topic helpful?

If you'd like to hear back from us, please provide your email address:

We'd love to hear what you think about this topic or the documentation as a whole. Feedback you enter here will be delivered to the documentation team.

Feedback submitted, thanks!