Default Version 1.0.2
September 18, 2026
VMware Vision Ingestion Add-on
Raw VMware syslog parsing for heavy forwarders or indexers: event boundaries, timestamps and encoding. Pair with VMware Vision for search-time fields and dashboards.Built by majid ershadi
Compatibility
Splunk Enterprise, Splunk Cloud
Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0
CIM Version: 8.x
Rating
5(1)
Log in to rate this app
Support
Developer Supported
TA-vmware-vision supplies event-boundary, timestamp and character-encoding settings for VMware syslog at the first full parsing tier. It supports the VMware Vision vCenter, ESXi, Aria and JSON sourcetypes. Install it on a heavy forwarder that parses raw VMware events, or on indexers when they are the first full parsing tier. Use the full VMware Vision app on search heads for field normalization, dashboards, data models and CIM mappings. This add-on contains no Python lookup, collection script, dashboard, enabled listener, index definition or forwarding destination. It does not poll VMware APIs.
Categories
IT Operations, Utilities
Created by
majid ershadi
Source code
Type
addon
Downloads
8
Splunk Answers
Resources
Log in to report this app listing.