Splunk® OVA for VMware and NetApp

Splunk OVA for VMware

Acrobat logo Download manual as PDF


This documentation does not apply to the most recent version of Splunk® OVA for VMware and NetApp. For documentation on the most recent version, go to the latest release.
Acrobat logo Download topic as PDF

About the Splunk OVA for VMware

The Splunk OVA for VMware is a preconfigured virtual machine with a lightweight operating system, Splunk heavy forwarder and all necessary add-ons and supporting add-ons for scheduling collection of inventory and performance data from VMWare vCenter servers. The Splunk OVA for VMware deploys as a Data Collection Node (DCN) to collect data for the Splunk IT Service Intelligence Virtualization Module and the Splunk App for VMware.

DCNs are required components for any Splunk App for VMware or Splunk IT Service Intelligence Virtualization Module deployment. Users can use the Splunk OVA for VMware to deploy a DCN but users can set up a DCN without the Splunk OVA for VMware by creating your own data collection node, using the steps in the Install the Splunk OVA for VMware section of this manual.

Requirements

The Splunk OVA for VMware contains:

  • Virtual Hardware v11
  • CentOS Linux release 7.7.1908 (Core)
  • Disk Size 16gb
  • VMWare Tools v10.3.0.5330 (build-8931395)
  • Open ports 22, 8000, 8089, 8065 8008, 1514, 514
  • A Splunk Enterprise version 8.0.3 heavy forwarder
  • Splunk Addon for VMWare 3.4.7 (includes Splunk_TA_vmware version 3.4.7, Splunk_TA_esxilogs version 3.4.7, SA-Hydra version 4.1.1)

The Splunk OVA for VMware comes with two default user accounts:

  • The administrator account, with the credentials splunk/changeme.
  • The root user account, with the credentials root/changemenow.

The data collection node (DCN) deployment has the following default configuration:

  • Eight cores. 8 vCPUs or 4 vCPUs with two cores with a reservation of 2GHz.
  • 12GB memory with a reservation of 1GB.
  • 10-12GB of disk space.

The data collection node (DCN) scheduler should be installed on a dedicated Splunk instance such as the heavy forwarder if you have a search head cluster. It's best not to install it on a search head because, the more disconnected search heads you have hitting an indexing tier, the harder it is to control the load on the indexers.

Last modified on 10 April, 2020
  NEXT
Install the Splunk OVA for VMware

This documentation applies to the following versions of Splunk® OVA for VMware and NetApp: 3.4.7


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters