Splunk® App for VMware (Legacy)

Configuration Guide

On August 31, 2022, the Splunk App for VMware will reach its end of life. After this date, Splunk will no longer maintain or develop this product. The functionality in this app is migrating to a content pack in Data Integrations. Learn about the Content Pack for VMware Dashboards and Reports.
This documentation does not apply to the most recent version of Splunk® App for VMware (Legacy). For documentation on the most recent version, go to the latest release.

Data model acceleration configuration file reference

Edit datamodels.conf, located on your search head at: /etc/apps/

The default configurations of the Data Model properties are:

SA-VMW-HierarchyInventory/default/datamodels.conf


[VMwareInventory]
acceleration = 1
acceleration.earliest_time = -1mon
acceleration.cron_schedule = */5 * * * *

SA-VMW-Performance/default/datamodels.conf


[VMwarePerformance]
acceleration = 1
acceleration.earliest_time = -1mon
acceleration.cron_schedule = */5 * * * *


Common information model data model acceleration configurations

When you install Splunk_SA_CIM and the Splunk App for VMWare on the same search head, the following data model acceleration configurations for CIM data models are created in /Splunk_TA_vmware/default/inputs.conf.

[dm_accel_settings]
interval = 86400

[dm_accel_settings://Performance]
acceleration = true

[dm_accel_settings://Change_Analysis]
acceleration = true

[dm_accel_settings://Authentication]
acceleration = true

These stanzas are used to accelerate the CIM data models by default. Using the stanzas listed in inputs.conf of Splunk_TA_vmware, the dm_accel_settings.py file in SA-utils creates the following stanzas in the datamodels.conf of Splunk_SA_CIM/local.

[Change_Analysis]
acceleration = true

[Authentication]
acceleration = true

[Performance]
acceleration = true
Last modified on 27 October, 2016
Data collection configuration file reference  

This documentation applies to the following versions of Splunk® App for VMware (Legacy): 3.3.0


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters