Splunk® Supported Add-ons

Splunk Add-on for vCenter Logs

Data collection planning and requirements for the Splunk Add-on for vCenter Logs

Before you deploy the Splunk Add-on for vCenter Logs review these requirements.

Splunk platform version requirements

Current add-on version Supported versions of Splunk Enterprise
4.2.1
  • 8.2.x
  • 9.0.x
  • 9.1.x

VMware index

The vCenter logs data forwarded from the forwarder is stored in this index. The Splunk Add-on for vCenter Logs package indexes the data into the vmware-vclog index defined in Splunk Add-on for VMware Metrics Indexes. If you are using Splunk Add-on for VMware Metrics, then you need to install Splunk Add-on for VMware Metrics Indexes in your environment to get this index. If you are using Splunk Add-on for VMware, then you need to install Splunk Add-on for VMware Indexes in your environment to get the index."


Index Description
vmware-vclog Stores vCenter server log data.

Data volume requirements

The expected vCenter logs data volume ingested by this package in a typical environment is 15 MB per host per day. The actual volume varies depending on the log data collected and the number of virtual machines on a host.

Data type Data volumne
vCenter server logs 15 MB per host per day

Add-on Version compatibility with Splunk Add-on for VMware Metrics and its prerequisite add-ons

Splunk Add-on for VMware Metrics version Compatible Splunk Add-on for vCenter Logs version Compatible Splunk Add-on for VMware Metrics Indexes version Compatible vCenter version Compatible ESXi version
4.2.1 4.2.1 4.2.1
  • 6.5
  • 6.7
  • 7.0
  • 6.5
  • 6.7
  • 7.0
4.2.4 4.2.1 4.2.1
  • 7.0, 8.0
  • 7.0, 8.0

Add-on Version compatibility with Splunk Add-on for VMware and its prerequisite add-ons

vCenter versions 5.x and 6.x are End of Life (EOL).

Splunk Add-on for VMware version Compatible Splunk Add-on for vCenter Logs version Compatible Splunk Add-on for VMware Indexes version Compatible vCenter version Compatible ESXi version
4.0.3 4.2.1 4.0.3
  • 6.5
  • 6.7
  • 7.0
  • 6.5
  • 6.7
  • 7.0
4.0.4 4.2.1 4.0.3
  • 6.5
  • 6.7
  • 7.0
  • 6.5
  • 6.7
  • 7.0
4.0.5 4.2.1 4.0.3
  • 6.5
  • 6.7
  • 7.0
  • 6.5
  • 6.7
  • 7.0
4.0.6 4.2.1 4.0.3
  • 7.0, 8.0
  • 7.0, 8.0
Last modified on 20 June, 2024
Release History for the Splunk Add-on for vCenter Logs   Installation and configuration overview for the Splunk Add-on for vCenter Logs

This documentation applies to the following versions of Splunk® Supported Add-ons: released


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters