Install and configure the Splunk Add-on for VMware Extractions

The Splunk Add-on for VMware Extractions contains the search-time extractions for the data collected by Splunk Add-on for VMware.

Follow the instructions for your environment type.

Install and configure the Splunk Add-on for VMware Extractions in an on-premises environment

Install in a clustered search head deployment

Follow these steps to install the add-on on a search head in an on-premises environment:

You have to use a search head cluster deployer to push the configurations across all the search head nodes. Follow these steps on search head cluster deployer:

1. Download the Splunk Add-on for VMware Extractions package from Splunkbase and extract the TA-VMW-FieldExtractions package from the download to $SPLUNK_HOME/etc/shcluster/apps.
2. Verify that the TA-VMW-FieldExtractions package is copied correctly in the $SPLUNK_HOME/etc/shcluster/apps directory.
3. On your deployer, deploy the package to every member of your search head cluster using this command:

   ./splunk apply shcluster-bundle -target <URI>:<management_port> -auth <username>:<password>
   

Once you have completed installation, all the search-time extractions are available and the Hydra troubleshooting dashboards are visible in the dashboards list. No additional steps are required for the configuration.

Install in a non-clustered search head deployment

1. Stop your Splunk search head instance.
2. Download the Splunk Add-on for VMware Extractions from Splunkbase.
3. Extract the TA-VMW-FieldExtractions package from the download and save it to $SPLUNK_HOME\etc\apps.
4. Start your Splunk search head instance.

Once you have completed the installation, all the search-time extractions are available and the Hydra troubleshooting dashboards are visible in the dashboards list. No additional steps are required for configuration.

Install and configure the Splunk Add-on for VMware Extractions in a cloud environment

1. Log in to your search head.
2. On the Splunk Web home page, click Find More Apps.
3. Search for "Splunk Add-on for VMware Indexes" and click Install.
4. Enter your Splunk.com login credentials, read and accept the terms and conditions, and click Login and Install.
5. Go to Apps > Manage Apps to review the installed app on the Apps page.

Once you have completed the installation, all the search-time extractions are available and the Hydra troubleshooting dashboards are visible in the dashboards list. No additional steps are required for configuration.