Splunk® App for VMware (Legacy)

Configuration Guide

Acrobat logo Download manual as PDF


On August 31, 2022, the Splunk App for VMware will reach its end of life. After this date, Splunk will no longer maintain or develop this product. The functionality in this app is migrating to a content pack in Data Integrations. Learn about the Content Pack for VMware Dashboards and Reports.
Acrobat logo Download topic as PDF

Add, edit, or delete a VMware vCenter Server

Add a vCenter Server

Add a VMware vCenter Server and configure it as a source of data in your environment. You must add and configure each vCenter Server individually.

Note: When you add a vCenter Server to your environment, make sure that the Distributed Collection Scheduler is not running.

  1. Navigate to the Collection Configuration dashboard, in the Virtual Centers panel, click +.
  2. Configure the vCenter Server as a source of data.
    1. Enter the fully qualified domain name for the vCenter Server. For example, test-vcenter100.example.com is a fully qualified domain name for a vCenter Server.
    2. Enter the vCenter Server user name. For example, administrator is a user name for a local user. splunkadmin@splunk.local is a user name for an Active Directory domain user.
    3. Enter the vCenter Server password. This is the password you use to access the vCenter Server.
    4. Collect vCenter Server logs. Select the check box to enable data collection. Specify the following information for the vCenter Server logs.
      1. Enter the vCenter Server Splunk forwarder URI. For example, https://test-vcenter100:8089 is a valid vCenter Server Splunk forwarder URI.
      2. Enter the vCenter Server Splunk forwarder user name. For example, the default user name is admin.
      3. Enter the vCenter Server Splunk forwarder password. For example, the default password is changeme.
    5. Choose the hosts from which you want to collect data. The Collect from all hosts setting is enabled by default. Select the check box to disable data collection from all hosts. Select the check box for individual hosts from which you want to collect data. To specify collection from specific hosts, enter a regular expression in the Host whitelist Regex field.
  3. Click Save.
  4. Verify that the vCenter Server is configured correctly. A correctly configured vCenter Server has a green check mark in it and a green check box that indicates credential validation.
  5. Click the magnifying glass next to hosts to verify that the correct hosts are in the data collection configuration and the Excluded Hosts list.
  6. Click Close.
  7. Restart the scheduler.

Edit vCenter Server settings

  1. On the Collection Configuration dashboard, select a vCenter Server.
  2. Click the pencil icon.
  3. Edit the properties for the vCenter Server configuration in your Splunk environment.
  4. Click Save.

Delete a vCenter Server

When you delete a vCenter Server, Splunk App for VMware stops collecting data from it.

Note: When you remove a vCenter Server from your environment, make sure that the scheduler is not running.

  1. On the Collection Configuration dashboard, select the vCenter Server.
  2. Click the trash can icon.
  3. Confirm that you want to delete the vCenter Server.
  4. Click Save.
  5. Restart your scheduler.
Last modified on 13 April, 2022
PREVIOUS
Add, edit, or delete a data collection node
  NEXT
Enable Data model acceleration and use data models

This documentation applies to the following versions of Splunk® App for VMware (Legacy): 4.0.4


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters