Splunk Add-on for VMware
Overview
Details
Splunk_TA_Vmware - Contains the python based API data collection engine and collects data from VMware environment.
SA-Hydra - Collects API based data from vCenter. It schedules jobs from the Search Head and runs the worker processes on each data collection node.
Please install the Splunk Add-on for VMware Indexes (https://splunkbase.splunk.com/app/5640/) in order to define the indexes used by Splunk Add-on for VMware. Follow the Install and Configure Splunk Add-on for VMware Indexes.
Please install the Splunk Add-on for VMware Extractions (https://splunkbase.splunk.com/app/5641/) which contains the search time extractions for use with the Splunk IT Service Intelligence Virtualization Module and the Splunk App for VMware. Follow the Install and Configure Splunk Add-on for VMware Extractions.
The packages "SA-VMWIndex", "TA-VMW-FieldExtractions", "Splunk_TA_vcenter" and "Splunk_TA_esxilogs" have been removed from Splunk Add-on for VMware build and published as an individual Splunkbase App in order to make the add-on compatible with Self-service installation in cloud environments
If you would like to collect the vCenter logs from your environment, then install Splunk Add-on for vCenter Logs (https://splunkbase.splunk.com/app/5601) by following the steps mentioned in Install and Configure Splunk Add-on for vCenter Logs (https://docs.splunk.com/Documentation/AddOns/released/VMWvcenterlogs/CollectData).
If you would like to collect the ESXi logs from your environment, then install Splunk Add-on for VMware ESXi Logs (https://splunkbase.splunk.com/app/5603/) by following the steps mentioned in Install and Configure Splunk Add-on for VMware ESXi Logs (https://docs.splunk.com/Documentation/AddOns/released/VMWesxilogs/CollectData).
Each component works with a different part of the VMware Infrastructure to collect and transform the data into the format needed for the Splunk App for VMware and the Virtualization Module for ITSI, and is required to work with the Splunk OVA for VMware (https://splunkbase.splunk.com/app/3216/).
For documentation, see the Splunk Add-on for VMware documentation manual.
Release Notes
Version 4.0.3
https://docs.splunk.com/Documentation/AddOns/released/VMW/Releasenotes
Version 4.0.2
https://docs.splunk.com/Documentation/AddOns/released/VMW/Releasenotes#Release_notes_for_Splunk_Add-on_for_VMware
Version 4.0.1
https://docs.splunk.com/Documentation/AddOns/released/VMW/Releasenotes#Release_notes_for_Splunk_Add-on_for_VMware
Version 4.0.0
https://docs.splunk.com/Documentation/AddOns/released/VMW/Releasenotes
Version 3.4.7
https://docs.splunk.com/Documentation/AddOns/released/VMW/Releasenotes
Version 3.4.6
https://docs.splunk.com/Documentation/AddOns/released/VMW/Releasenotes#Release_notes_for_Splunk_Add-on_for_VMware
Version 3.4.5
https://docs.splunk.com/Documentation/AddOns/released/VMW/Releasenotes
Version 3.4.4
https://docs.splunk.com/Documentation/AddOns/released/VMW/Releasenotes
Version 3.4.3
https://docs.splunk.com/Documentation/AddOns/unreleased/VMW/Releasenotes
Version 3.4.2
Version 3.4.1
Version 3.4.0
http://docs.splunk.com/Documentation/AddOns/released/VMW/Releasenotes
Version 3.3.2
The latest version of Splunk Add-on for VMware is 3.3.2, In this release, the sa-utils component has been replaced with SA-VMNetAppUtils, if you are using the previous version of Splunk add-on for VMware and want to upgrade to the latest version (3.3.2), remove the SA-Utils component on your Search Heads, Scheduler and DCNs and replace it with SA-VMNetAppUtils when you upgrade.
See Upgrade to Splunk App for VMware 3.3.2 for the detailed procedures.
The Splunk Add-on for VMWare is compatible with The Splunk App for VMware 3.3.2 and the Splunk ITSI Module for Virtualization 2.4 and above