Source types for the Splunk Add-on for VMware ESXi logs
The Splunk Add-on for VMware ESXi logs collects data from the following sources via Syslog.
Type of data | Source | Source type | Collection method |
---|---|---|---|
ESXi logs | vmware:esxilog:source::tcp:1514 | vmware:esxlog:Hostd | File monitoring |
vmware:esxlog:vmkernel | File monitoring | ||
vmware:esxlog:Vpxa | File monitoring | ||
vmware:esxlog:Fdm | File monitoring | ||
vmware:esxlog:hostd-probe | File monitoring | ||
vmware:esxlog:syslog | File monitoring | ||
vmware:esxlog:crond | File monitoring | ||
vmware:esxlog:smartd | File monitoring | ||
vmware:esxlog:sfcb-CIMXML-Processor | File monitoring | ||
vmware:esxilog:sfcb-vmware | File monitoring | ||
vmware:esxlog:heartbeat | File monitoring | ||
vmware:esxlog:vobd | File monitoring | ||
vmware:esxlog:vmkwarning | File monitoring | ||
vmware:esxlog:shell | File monitoring | ||
vmware:esxlog:vmauthd | File monitoring | ||
vmware:esxlog:sshd | File monitoring | ||
vmware:esxlog:cimslp | File monitoring | ||
vmware:esxlog:ImageConfigManager | File monitoring | ||
vmware:esxlog:Rhttpproxy | File monitoring | ||
vmware:esxlog:storageRM | File monitoring | ||
vmware:esxlog:root | File monitoring | ||
vmware:esxlog:sfcb-hhrc | File monitoring |
Troubleshoot the Splunk Add-on for VMware ESXi Logs | Credits |
This documentation applies to the following versions of Splunk® Supported Add-ons: released
Feedback submitted, thanks!