Release notes for Splunk Add-on for VMware

Version 4.0.4 of the Splunk Add-on for VMware was released on 29 Apr 2022.

Version 4.0.4 of Splunk Add-on for VMware only contains "Splunk_TA_vmware" and "SA-Hydra" packages. "SA-VMWIndex", "TA-VMW-FieldExtractions", "Splunk_TA_vcenter", "Splunk_TA_esxilogs" packages that were part of add-on build in its v4.0.2 or below, have been removed from the add-on build and will be published as individual apps on Splunkbase.

What's New

For Version 4.0.4, The Splunk Add-on for VMware is now updated with bug fixes.

Upgrade from version 4.0.2 to 4.0.4

See the steps to upgrade from the Splunk Add-on for VMware from v4.0.2 to v4.0.4. If you are using a version previous to 4.0.2, follow the steps to upgrade to v4.0.2 first.

Upgrade from versions 3.4.6 and earlier

In the release 3.3.2, the SA-Utils component has been renamed to SA-VMNetAppUtils. It does not change the input and dashboard you configured in Splunk Add-on for VMware and Splunk App for VMware.

In the release 3.4.2, a new component, SA-VMWIndex has been added to the Splunk Add-on for VMware package. This component contains the indexes.conf which has the definitions of all the indexes [vmware-perf, vmware-inv, vmware-taskevent, vmware-vclog, vmware-esxilog]. The indexes.conf will be removed from all the components of VMware Add-on as these have been added to SA-VMWIndex.

In the release 3.4.3, a new component, TA-VMW-FieldExtractions has been added to the Splunk Add-on for VMware package. This component contains the search time knowledge objects. The search time knowledge objects have been removed from Splunk_TA_vmware .

See the upgrade section of the Splunk App for VMware manual for the detailed procedures.

Note: Splunk recommend you backup your existing deployment before upgrade.
See "Back up configuration information" in the Admin Manual and "Back up indexed data" in the Managing Indexers and Clusters Manual

Fixed Issues

This version of the Splunk Add-on for VMware has the following reported fixed issues. If no issues appear below, no issues have yet been reported.

Known Issues

This version of the Splunk Add-on for VMware has the following reported known issues and workarounds. If no issues appear below, no issues have yet been reported.

Date filed	Issue number	Description
2021-08-05	VMW-6236	Incorrect value for Cluster performance metrics due to aggregation mechanism on vCenter side.
2021-06-09	VMW-6165	Drill-down not working in Event viewer panels in Hydra Framework in Splunk 8.2.0,8.2.1
2020-09-30	VMW-5802	No data collection occurs when the DCN is configured with more than 8 worker processes on Splunk version 8.x.
2019-10-11	VMW-5269	Collection configuration page doesn't get loaded in Internet Explorer browser
2019-09-19	VMW-5240	Gaps and negative values in VMware Host/VM Performance data at random time samples
2019-09-19	VMW-5239	Duplication in performance data for random sampling time
2019-06-19	VMW-5134	Field changeset is having value "null" in inventory data
2018-04-25	VMW-4848	DCN collection worker failures - vmodl.query.PropertyCollector:session exceptions.