Splunk Forwarder Virtual Appliance for VMware

Thanks For Downloading!

Review the documentation below and follow any custom installation steps. If no install steps are listed, most Splunk Apps and Add-ons can be installed as follows:

Windows: Decompress the downloaded file using a tool like 7-Zip and place the resulting folder into %PROGRAMFILES%\Splunk\etc\apps. Then restart Splunk using the splunk restart command or the GUI.

Unix/Linux: Decompress the downloaded file using a tool like tar -xvf and place the resulting folder into $SPLUNK_HOME/etc/apps. Then restart Splunk using the splunk restart command or the GUI.

Splunk for VMware unlocks the value of vSphere data such as performance metrics, logs, vCenter Server tasks and events.

It enables:

• Proactive monitoring of your VMware environment. Identify issues and drill down to the root of cause of the problem using the new visualizations.
• Correlation of virtualization data with data from other technology tiers. Find causal links between application performance issues and the underlying hypervisor, storage, networking and server infrastructure.
• Granular performance management and analysis. Collect and persist deep granular performance data directly from the vSphere hosts and trace virtual machine performance from host to host to troubleshoot contention-related issues.
• Complete operational visibility and capacity analytics. Find capacity constrained hosts, idle virtual machines, underutilized clusters, overprovisioned datastores. Trend performance statistics to find usage patterns and likely capacity bottlenecks.
• Change tracking and asset reporting. Track detailed user-initiated changes, automated vSphere actions as well as report on inventory and status of virtual components.
• Security reporting and monitoring. Monitor the environment for suspicious activity, user role changes, unauthorized access and more.

Splunk for VMware uses the power of Splunk to give you the insights you need into your IT infrastructure and make informed business and operational decisions.

---
If you would like to know more about the solution, including how to install and deploy it, please look at the Installation and Configuration Guide. The Splunk for VMware solution is comprised of 4 components that must be downloaded separately.

There is a 3 part installation video and a 3 part usage video which we highly recommend you take a look at before moving on to the installation.
Installation videos
Part 1, Part 2, Part 3

Usage guide videos
Part 1, Part 2, Part 3

This is download 2 of 3.

Splunk Forwarder Virtual Appliance for VMware. This VM image (.ova) is a data collector for ESX/ESXi performance metrics, ESX/ESXi logs, VC Server tasks , events & inventory that you deploy using vCenter Server (VC).

---
Get the other components here:

1: Splunk App for VMware. This app has the views, dashboards and saved searches that provide insights into your virtualization layer.

3: Splunk Technology Add-on for VMware vCenter. This is used to collect vCenter Server system logs and is installed into Splunk Forwarders running on your vCenter Server machines.

Installation details for all these components are in the Splunk for VMware Installation and Configuration Guide.

---
Note: The Splunk App for VMware is designed to work with Splunk Enterprise. You can download a trial version of Splunk Enterprise here. Please follow the guidelines to installing and configuring Splunk Enterprise before downloading the Splunk App for VMware. To get help with Splunk Enterprise or the Splunk App for VMware, log a support case via the Splunk Support Portal.