Splunk® Supported Add-ons

Splunk Add-on for VMware Metrics

Acrobat logo Download manual as PDF


Acrobat logo Download topic as PDF

Installation and configuration overview for the Splunk Add-on for VMware Metrics

The following image outlines a full installation of the Splunk Add-on for VMware Metrics on a distributed deployment.

Vmw ova addon.png

Deploy the Splunk Add-on for VMware Metrics

This table provides the required install locations for each VMware data collection components. You can forward data from a DCN either directly to an indexer or to an intermediary heavy forwarder.

All of the VMware components are packaged in the Splunk Add-on for VMware Metrics available on Splunkbase. You have to extract them from the directory and install them in the proper locations.

Component Search head Scheduler (DCS) Indexer Data Collection Node (DCN) Dedicated ESXi log forwarder Dedicated vCenter log forwarder Operation performed by the package
Splunk_TA_vmware_inframon X X* Runs a Python-based API data collection engine and performs field extractions for VMware data.

(*)If you use the OVA to deploy a DCN, the DCN already has this component.

Splunk_TA_esxilogs X X* X** X Handles log data collection from ESXi hosts.

(*)If you send syslog data directly to the indexer.

(**)If you send Syslog data directly to the Data Collection Node (DCN).

Splunk_TA_vcenter X X* X** X Handles log data collection of vCenter logs.

(*)If you send syslog data directly to the indexer.

(**)If you send Syslog data directly to the Data Collection Node (DCN).

SA-Hydra-inframon X X* Schedules data collection jobs from the scheduler, and runs worker processes on a DCN which are used to collect the VMware Data.

(*)If you use the OVA to deploy a DCN, the DCN already has this component.

SA-VMWIndex-inframon X Creates indexes that store VMware data.

As of vCenter 6.0, installing a forwarder on your vCenter server for log forwarding is not recommending as a best practice for VMware. Instead, forward vCenter application logs to syslog, an intermediate forwarder, or directly to a Splunk indexer.

Last modified on 08 January, 2021
PREVIOUS
Data collection planning and requirements for the Splunk Add-on for VMware Metrics
  NEXT
Set up your system for the Splunk Add-on for VMware Metrics

This documentation applies to the following versions of Splunk® Supported Add-ons: released


Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters