Source types for the Splunk Add-on for Microsoft Hyper-V

The Splunk Add-on for Microsoft Hyper-V provides the index-time and search-time knowledge for Hyper-V inventory, performance metrics and alert data in the following formats.

Data source	Source type	Description	CIM data models	ITSI data models
Powershell Sourcetype	microsoft:hyperv:vm	Microsoft Hyper-V virtual machines (basic inventory).	Inventory, Performance	Virtualization
	microsoft:hyperv:vm:ext	Microsoft Hyper-V virtual machines (extended inventory).
	microsoft:hyperv:vm:disk	Microsoft Hyper-V virtual machine storage data.
	microsoft:hyperv:vm:network	Microsoft Hyper-V virtual machine network interface data.
	microsoft:hyperv:host	Microsoft Hyper-V host servers (basic inventory).
	microsoft:hyperv:host:ext	Microsoft Hyper-V host servers (extended inventory)
	microsoft:hyperv:host:switch	Microsoft Hyper-V host switch
	microsoft:hyperv:perf:host	Microsoft Hyper-V host performance
	microsoft:hyperv:perf:datastore	Microsoft Hyper-V datastore performance
	microsoft:hyperv:perf:vm	Microsoft Hyper-V VM performance.
Performance Monitor Sourcetype	perfmon:HyperV_Hypervisor	Microsoft Hyper-V Hypervisor Perfmon CounterSet List (Information on the hypervisor).
	perfmon:HyperV_Logical_Processor	Microsoft Hyper-V Hypervisor Logical Processor CounterSet List (Information on virtual processors)
	perfmon:HyperV_Root_Processor	Microsoft Hyper-V Hypervisor Root Virtual Processor CounterSet List (Information on virtual processors)
	perfmon:HyperV_Virtual_Processor	Microsoft Hyper-V Hypervisor Virtual Processor Perfmon CounterSet List (Information on virtual processors)	Performance	None
	perfmon:HyperV_Partition	Microsoft Hyper-V Hypervisor Partition Perfmon Counter List (Information on virtual machines)
	perfmon:HyperV_Root_Partition	Microsoft Hyper-V Hypervisor Root Partition Perfmon Counter List (Information on virtual machines)
	perfmon:HyperV_VM_VID_Partition	Microsoft Hyper-V VM VID Partition Perfmon Counter List (These are the perf counters for a VID partition object)
	perfmon:HyperV_Virtual_Switch	Microsoft Hyper-V Virtual Switch Perfmon Counter List (This counter set represents the statistics for the Microsoft Hyper-V switch.)
	perfmon:HyperV_VM_Health	Microsoft Hyper-V Virtual Machine Health Summary Perfmon Counter List (This counter set represents the health summary statistics for the Virtual Machine Management Service.)
	perfmon:HyperV_VM_Summary	Microsoft Hyper-V Virtual Machine Summary Perfmon Counter List
	perfmon:HyperV_Network	Microsoft Hyper-V Network Adapter Perfmon Counter List (This counter set represents the statistics for the Microsoft Hyper-V network adapter)	Performance
	perfmon:HyperV_Virtual_Storage_Device	Microsoft Hyper-V Virtual Storage Device Perfmon Counter List (This counter set represents the statistics for a virtual storage device.)
	perfmon:HyperV_Legacy_Network	Microsoft Hyper-V Network Adapter Perfmon Counter List (This counter set represents the statistics for the Microsoft Hyper-V network adapter).
Windows event log sourcetype	WinEventLog:Microsoft-Windows-Hyper-V-Config-Admin	Windows Events from Windows Event Log - Microsoft-Windows-Hyper-V-Config-Admin	Change
	WinEventLog:Microsoft-Windows-Hyper-V-Config-Operational	Windows Events from Windows Event Log - Microsoft-Windows-Hyper-V-Config-Operational
	WinEventLog:Microsoft-Windows-Hyper-V-Hypervisor-Admin	Windows Events from Windows Event Log - Microsoft-Windows-Hyper-V-Hypervisor-Admin
	WinEventLog:Microsoft-Windows-Hyper-V-Hypervisor-Operational	Windows Events from Windows Event Log - Microsoft-Windows-Hyper-V-Hypervisor-Operational
	WinEventLog:Microsoft-Windows-Hyper-V-Image-Management-Service-Admin	Windows Events from Windows Event Log - Microsoft-Windows-Hyper-V-Image-Management-Service-Admin
	WinEventLog:Microsoft-Windows-Hyper-V-Image-Management-Service-Operational	Windows Events from Windows Event Log - Microsoft-Windows-Hyper-V-Image-Management-Service-Operational
	WinEventLog:Microsoft-Windows-Hyper-V-Intergration-Admin	Windows Events from Windows Event Log - Microsoft-Windows-Hyper-V-Intergration-Admin
	WinEventLog:Microsoft-Windows-Hyper-V-Network-Admin	Windows Events from Windows Event Log - Microsoft-Windows-Hyper-V-Network-Admin
	WinEventLog:Microsoft-Windows-Hyper-V-Network-Operational	Windows Events from Windows Event Log - Microsoft-Windows-Hyper-V-Network-Operational
	WinEventLog:Microsoft-Windows-Hyper-V-SynthNic-Admin	Windows Events from Windows Event Log - Microsoft-Windows-Hyper-V-SynthNic-Admin
	WinEventLog:Microsoft-Windows-Hyper-V-SynthNic-Operational	Windows Events from Windows Event Log - Microsoft-Windows-Hyper-V-SynthNic-Operational
	WinEventLog:Microsoft-Windows-Hyper-V-VMMS-Admin	Windows Events from Windows Event Log - Microsoft-Windows-Hyper-V-VMMS-Admin
	WinEventLog:Microsoft-Windows-Hyper-V-Worker-Admin	Windows Events from Windows Event Log - Microsoft-Windows-Hyper-V-Worker-Admin
	WinEventLog:Microsoft-Windows-Hyper-V-SynthStor-Admin	Windows Events from Windows Event Log - Microsoft-Windows-Hyper-V-SynthStor-Admin
	WinEventLog:Microsoft-Windows-Hyper-V-SynthStor-Operational	Windows Events from Windows Event Log - Microsoft-Windows-Hyper-V-SynthStor-Operational
	WinEventLog:Microsoft-Windows-Hyper-V-Compute-Admin	Windows Events from Windows Event Log - Microsoft-Windows-Hyper-V-Compute-Admin
	WinEventLog:Microsoft-Windows-Hyper-V-VmSwitch-Operational	Windows Events from Windows Event Log - Microsoft-Windows-Hyper-V-VmSwitch-Operational
	WinEventLog:Microsoft-Windows-Hyper-V-VMMS-Networking	Windows Events from Windows Event Log - Microsoft-Windows-Hyper-V-VMMS-Networking
	WinEventLog:Microsoft-Windows-Hyper-V-VMMS-Operational	Windows Events from Windows Event Log - Microsoft-Windows-Hyper-V-VMMS-Operational