VMware
VMware is a virtualization and cloud computing software provider. With VMware, a hypervisor is installed on the physical server to allow for multiple virtual machines to run on the same physical server. Each VM can run its own operating system, allowing multiple OSes to run on one physical server. All the VMs on the same physical server share resources. To keep operations running smoothly, organizations that use VMware are interested in deep operational visibility into granular performance metrics, logs, tasks, events, and topology from hosts, virtual machines and virtual centers. In the Common Information Model, VMware data can is mapped to the Inventory and Performance data models.
Configuration
Guidance for onboarding data can be found in the Spunk Documentation:
- Getting Data In (Splunk Enterprise)
- Getting Data In (Splunk Cloud)
- Get data into Splunk Observability Cloud
Refer to the documentation, and note the following:
- Add-on: Splunk Add-on for VMware Indexes
- Add-on: Splunk Add-on for VMware Metrics Indexes
- Add-on: Splunk Add-on for VMware Metrics
- Add-on: Splunk Add-on for VMware Extractions
- Add-on: Splunk Add-on for VMware
- Add-on: Splunk Add-on for VMware ESXi Logs
- Add-on: Splunk Add-on for vCenter Logs
- Add-on: Splunk OVA for VMware
- Add-on: Splunk OVA for VMware Metrics
- Add-on: Splunk VMware OVA for ITSI
Application
When your Splunk deployment is ingesting VMware data, you can use the data to achieve the following: