Splunk® IT Service Intelligence

Modules

Download manual as PDF

Download topic as PDF

Virtualization Module configurations

Configure the ITSI Virtualization Module to connect your virtualized data to your Splunk platform deployment.

Module entity roles

See the below table to identify the roles that the Virtualization Module assigns to entities.

ITSI Module ITSI Role
ITSI Virtualization Module virtualization

Install supported technologies

Install the ITSI supported technologies that apply to your deployment. Support add-ons for different instances are listed in the table below:

Technology Name Link to installation Search Heads Indexers Forwarders
Splunk Add-on for Microsoft Hyper-V Installation guide x x x
Splunk Add-on for VMware Installation guide x x x

See About installing Splunk add-ons to learn how to install a Splunk add-on in the following deployment scenarios.

Configure the Splunk Add-on for Microsoft Hyper-V to collect data and send to your Splunk deployment

Configure via .conf file

  1. Copy %SPLUNK_HOME%\etc\apps\Splunk_TA_Microsoft-HyperV\default\inputs.conf to local\inputs.conf.
  2. Enable the desired inputs as follows: disabled = 0.
  3. Restart your Splunk platform instance.

Configure the Virtualization Module to receive data from the Splunk Add-on for VMware

Configure ITOA roles to access Splunk Add-on for VMWare data within ITSI

The Splunk Add-on for VMware creates roles called splunk_vmware_user splunk_vmware_admin within the Splunk platform. Configure and assign the appropriate ITOA role to existing users or groups of users to grant them access to the Splunk Add-on for VMware data within ITSI.

  1. Log in to your Splunk search head.
  2. Navigate to Settings > Access controls > Users.
  3. Assign the splunk_vmware_admin to the ITOA_admin role of your Splunk platform instance. Users with the administrator role can configure data collection or thresholds for Splunk App for VMware.
  4. Assign the splunk_vmware_user roles to the ITOA_user role of your Splunk platform instance.
  5. Save your changes.

Configure your ITSI deployment to receive data from the Splunk Add-on for VMware

  1. Navigate to the version of the Splunk Add-on for VMware that is installed on your Splunk platform deployment.
  2. Navigate to the Collection Configuration page to configure Data Collection Node data collection and Virtual Center data collection.

Data Collection Node configuration

  1. Navigate to the Collection Configuration page.
  2. Under Data Collection Nodes, select Create New Collection Node.
  3. Enter in your Splunk Forwarder URI, Username, Password, and number of Worker Processes.
  4. Click Save.

Virtual Center configuration

  1. Navigate to the Collection Configuration page.
  2. Under Virtual Centers, select Collect from New Virtual Center.
  3. Enter in your Virtual Center FQDN, VC Username, VC Password, and select the Collect from all hosts checkbox.
  4. (Optional) Select the Collect from all hosts checkbox.
  5. (Optional) Enter in your VC Splunk Forwarder URI, 'VC Splunk Forwarder Username, 'and VC Splunk Forwarder Password.
  6. Click Save.

Verify Data Collection

Verify that the add-ons in your deployment are installed and configured correctly by checking the add-on's indices, sources or source types.

Add-on Data verification search
Splunk Add-on for Microsoft Hyper-V index=main tag=virtualization
Splunk Add-on for VMware index=vmware* tag=virtualization

Enable entity discovery

Enable entity discovery for the module to automatically discover entities for which relevant data has been collected. See Enable the automatic entity discovery search.

Learn More

See Installing add-ons in the Splunk Add-Ons guide to learn how to install a Splunk add-on in the following deployment scenarios:

Last modified on 13 March, 2020
PREVIOUS
About Virtualization Module
  NEXT
Virtualization Module KPIs and thresholds

This documentation applies to the following versions of Splunk® IT Service Intelligence: 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.1.0, 4.1.1, 4.1.2, 4.1.5, 4.2.0, 4.2.1, 4.2.2, 4.2.3, 4.3.0, 4.3.1, 4.4.0, 4.4.1, 4.4.2, 4.4.3


Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters