All Apps and Add-ons

Need Help Installing/Configuring Splunk for VMWare App

Splunk Employee
Splunk Employee

I am having some trouble installing and configuring the new Splunk for VMWare App. It might just be me doing something stupid/not obvious. The docs are good, but perhaps too detailed to some extent. I'm following them along correctly, I think, but wondering if any of you who've been successful with getting it working can share your secret to success or point me to the right parts of the documentation or provide hints or tips/tricks that I can try. Anything would be greatly appreciated. Thanks.

0 Karma

Splunk Employee
Splunk Employee

You can also take a look at the Installation Video Guide.

Feedback welcome.

0 Karma

Splunk Employee
Splunk Employee

Some troubleshooting information, to help you pinpoint your issues:


Here's imo the TL;DR response to our docs:

  1. Install the DCN, make sure the firewall is off and either allow remote auth or change the default password.
  2. Install the main app
  3. Add the dcn's IP and login creds to the VC ( I'd even recommend not turning on syslog till you know you're collecting data)
  4. Add the "splunk_vmware_admin" role to your main user
  5. Hit start scheduler

Hopefully that gets you data, most often people forget the role, or they have user perm issue with the VC. If you're not getting any data in and the checkmarks are all "green" on the config page, you'll probably find a detailed reason in the hydra logs.

Splunk Employee
Splunk Employee

What kind of issue are you seeing?

0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...