Virtualization Module configurations

Configure the ITSI Virtualization Module to connect your virtualized data to your Splunk platform deployment.

Module entity roles

See the below table to identify the roles that the Virtualization Module assigns to entities.

ITSI Module	ITSI Role
ITSI Virtualization Module	virtualization

Install supported technologies

Install the ITSI supported technologies that apply to your deployment. Support add-ons for different instances are listed in the table below:

Technology Name	Link to installation	Search Heads	Indexers	Forwarders
Splunk Add-on for Microsoft Hyper-V	Installation guide	x	x	x
Splunk Add-on for VMware	Installation guide	x	x	x

See About installing Splunk add-ons to learn how to install a Splunk add-on in the following deployment scenarios.

• single-instance Splunk Enterprise
• distributed Splunk Enterprise
• Splunk Cloud Platform
• Splunk Light

Configure the Splunk Add-on for Microsoft Hyper-V to collect data and send to your Splunk deployment

Configure via .conf file

1. Copy %SPLUNK_HOME%\etc\apps\Splunk_TA_Microsoft-HyperV\default\inputs.conf to local\inputs.conf.
2. Enable the desired inputs as follows: disabled = 0.
3. Restart your Splunk platform instance.

Configure the Virtualization Module to receive data from the Splunk Add-on for VMware

Configure ITOA roles to access Splunk Add-on for VMWare data within ITSI

The Splunk Add-on for VMware creates roles called splunk_vmware_user splunk_vmware_admin within the Splunk platform. Configure and assign the appropriate ITOA role to existing users or groups of users to grant them access to the Splunk Add-on for VMware data within ITSI.

1. Log in to your Splunk search head.
2. Navigate to Settings > Users.
3. Assign the splunk_vmware_admin to the ITOA_admin role of your Splunk platform instance. Users with the administrator role can configure data collection or thresholds for Splunk App for VMware.
4. Assign the splunk_vmware_user roles to the ITOA_user role of your Splunk platform instance.
5. Save your changes.

Configure your ITSI deployment to receive data from the Splunk Add-on for VMware

1. Navigate to the version of the Splunk Add-on for VMware that is installed on your Splunk platform deployment.
2. Navigate to the Collection Configuration page to configure Data Collection Node data collection and Virtual Center data collection.

Data Collection Node configuration

1. Navigate to the Collection Configuration page.
2. Under Data Collection Nodes, select Create New Collection Node.
3. Enter in your Splunk Forwarder URI, Username, Password, and number of Worker Processes.
4. Click Save.

Virtual Center configuration

1. Navigate to the Collection Configuration page.
2. Under Virtual Centers, select Collect from New Virtual Center.
3. Enter in your Virtual Center FQDN, VC Username, VC Password, and select the Collect from all hosts checkbox.
4. (Optional) Select the Collect from all hosts checkbox.
5. (Optional) Enter in your VC Splunk Forwarder URI, 'VC Splunk Forwarder Username, 'and VC Splunk Forwarder Password.
6. Click Save.

Verify Data Collection

Verify that the add-ons in your deployment are installed and configured correctly by checking the add-on's indices, sources or source types.

Add-on	Data verification search
Splunk Add-on for Microsoft Hyper-V	index=main tag=virtualization
Splunk Add-on for VMware	index=vmware* tag=virtualization

Enable entity discovery

Enable entity discovery for the module to automatically discover entities for which relevant data has been collected. See Enable the automatic entity discovery search.

Learn More

See Installing add-ons in the Splunk Add-Ons guide to learn how to install a Splunk add-on in the following deployment scenarios:

• single-instance Splunk Enterprise
• distributed Splunk Enterprise
• Splunk Cloud Platform
• Splunk Light