Splunk Add-on for VMware
Splunk Built
Overview
Details
The Splunk Add-on for VMware is a collection of add-ons used to collect and transform data from VMware vCenters, ESXi hosts and Virtual Machines. The Splunk Add-on for VMware contains the below components:
*Splunk_TA_Vmware - Contains the python based API data collection engine and collects data from VMware environment.
*Splunk_TA_esxilogs - Collects log data from your ESXi log hosts.
*Splunk_TA_vcenter - Collects vCenter log data and forwards it to the indexers in your environment.
*SA-Hydra - Collects API based data from vCenter. It schedules jobs from the Search Head and runs the worker processes on each data collection node.
*SA-VMNetappUtils - Contains the supporting files for SA-Hydra and Splunk_TA_vmware.
Each component works with a different part of the VMware Infrastructure to collect and transform the data into the format needed for the Splunk App for VMware and the Virtualization Module for ITSI, and is required to work with the Splunk OVA for VMware (https://splunkbase.splunk.com/app/3216/)
*Splunk_TA_Vmware - Contains the python based API data collection engine and collects data from VMware environment.
*Splunk_TA_esxilogs - Collects log data from your ESXi log hosts.
*Splunk_TA_vcenter - Collects vCenter log data and forwards it to the indexers in your environment.
*SA-Hydra - Collects API based data from vCenter. It schedules jobs from the Search Head and runs the worker processes on each data collection node.
*SA-VMNetappUtils - Contains the supporting files for SA-Hydra and Splunk_TA_vmware.
Each component works with a different part of the VMware Infrastructure to collect and transform the data into the format needed for the Splunk App for VMware and the Virtualization Module for ITSI, and is required to work with the Splunk OVA for VMware (https://splunkbase.splunk.com/app/3216/)
For documentation, see the Splunk Add-on for VMware documentation manual.
Release Notes
Version 3.4.2
June 11, 2018
Version 3.4.1
Jan. 2, 2018
Version 3.4.0
June 13, 2017
http://docs.splunk.com/Documentation/AddOns/released/VMW/Releasenotes
Version 3.3.2
Jan. 10, 2017
The latest version of Splunk Add-on for VMware is 3.3.2, In this release, the sa-utils component has been replaced with SA-VMNetAppUtils, if you are using the previous version of Splunk add-on for VMware and want to upgrade to the latest version (3.3.2), remove the SA-Utils component on your Search Heads, Scheduler and DCNs and replace it with SA-VMNetAppUtils when you upgrade.
See Upgrade to Splunk App for VMware 3.3.2 for the detailed procedures.
The Splunk Add-on for VMWare is compatible with The Splunk App for VMware 3.3.2 and the Splunk ITSI Module for Virtualization 2.4 and above
Version 3.3.1
Oct. 21, 2016