Virtualization Module configurations
Configure the ITSI Virtualization Module to connect your virtualized data to your Splunk platform deployment.
Module entity roles
See the below table to identify the roles that the Virtualization Module assigns to entities.
ITSI Module | ITSI Role |
---|---|
ITSI Virtualization Module | virtualization |
Install supported technologies
Install the ITSI supported technologies that apply to your deployment. Support add-ons for different instances are listed in the table below:
Technology Name | Link to installation | Search Heads | Indexers | Forwarders |
---|---|---|---|---|
Splunk Add-on for Microsoft Hyper-V | Installation guide | x | x | x |
Splunk Add-on for VMware | Installation guide | x | x | x |
See About installing Splunk add-ons to learn how to install a Splunk add-on in the following deployment scenarios.
Configure the Splunk Add-on for Microsoft Hyper-V to collect data and send to your Splunk deployment
Configure via .conf file
- Copy
%SPLUNK_HOME%\etc\apps\Splunk_TA_Microsoft-HyperV\default\inputs.conf
tolocal\inputs.conf
. - Enable the desired inputs as follows:
disabled = 0
. - Restart your Splunk platform instance.
Configure the Virtualization Module to receive data from the Splunk Add-on for VMware
Configure ITOA roles to access Splunk Add-on for VMWare data within ITSI
The Splunk Add-on for VMware creates roles called splunk_vmware_user
splunk_vmware_admin
within the Splunk platform. Configure and assign the appropriate ITOA role to existing users or groups of users to grant them access to the Splunk Add-on for VMware data within ITSI.
- Log in to your Splunk search head.
- Navigate to Settings > Users.
- Assign the
splunk_vmware_admin
to theITOA_admin
role of your Splunk platform instance. Users with the administrator role can configure data collection or thresholds for Splunk App for VMware. - Assign the
splunk_vmware_user
roles to theITOA_user
role of your Splunk platform instance. - Save your changes.
Configure your ITSI deployment to receive data from the Splunk Add-on for VMware
- Navigate to the version of the Splunk Add-on for VMware that is installed on your Splunk platform deployment.
- Navigate to the Collection Configuration page to configure Data Collection Node data collection and Virtual Center data collection.
Data Collection Node configuration
- Navigate to the Collection Configuration page.
- Under Data Collection Nodes, select Create New Collection Node.
- Enter in your Splunk Forwarder URI, Username, Password, and number of Worker Processes.
- Click Save.
Virtual Center configuration
- Navigate to the Collection Configuration page.
- Under Virtual Centers, select Collect from New Virtual Center.
- Enter in your Virtual Center FQDN, VC Username, VC Password, and select the Collect from all hosts checkbox.
- (Optional) Select the Collect from all hosts checkbox.
- (Optional) Enter in your VC Splunk Forwarder URI, 'VC Splunk Forwarder Username, 'and VC Splunk Forwarder Password.
- Click Save.
Verify Data Collection
Verify that the add-ons in your deployment are installed and configured correctly by checking the add-on's indices, sources or source types.
Add-on | Data verification search |
---|---|
Splunk Add-on for Microsoft Hyper-V | index=main tag=virtualization
|
Splunk Add-on for VMware | index=vmware* tag=virtualization
|
Enable entity discovery
Enable entity discovery for the module to automatically discover entities for which relevant data has been collected. See Enable the automatic entity discovery search.
Learn More
See Installing add-ons in the Splunk Add-Ons guide to learn how to install a Splunk add-on in the following deployment scenarios:
About the Virtualization Module | Virtualization Module KPIs and thresholds |
This documentation applies to the following versions of Splunk® IT Service Intelligence: 4.11.0, 4.11.1, 4.11.2, 4.11.3, 4.11.4, 4.11.5, 4.11.6, 4.12.0 Cloud only, 4.12.1 Cloud only, 4.12.2 Cloud only, 4.13.0, 4.13.1, 4.13.2, 4.13.3, 4.14.0 Cloud only, 4.14.1 Cloud only, 4.14.2 Cloud only, 4.15.0, 4.15.1, 4.15.2, 4.15.3, 4.16.0 Cloud only, 4.17.0, 4.17.1, 4.18.0, 4.18.1
Feedback submitted, thanks!