All Apps and Add-ons

Splunk App for VMware: Is there any way I can retrieve IP addresses of my VMs from the app?

Explorer

I have a configured VMware app with 1 DCN. As I look into the data being indexed into Splunk, there are details of Virtual Machines with the VM Name.
I want to know how can I map the VM Name to its IP Address/Hostname for further clarity. The IP addresses are only available for the Hosts but not the VMs.

Any help in how I can achieve this or what I am missing? Thank you in advance

0 Karma
1 Solution

Splunk Employee
Splunk Employee

If VMware Tool is installed on VMs then you will get the ip in changeSet.guest.ipAddress field and hostname in changeSet.guest.ipStack{}.dnsConfig.domainName.

View solution in original post

0 Karma

Splunk Employee
Splunk Employee

If VMware Tool is installed on VMs then you will get the ip in changeSet.guest.ipAddress field and hostname in changeSet.guest.ipStack{}.dnsConfig.domainName.

View solution in original post

0 Karma

Explorer

Thank you. I noticed some VMs did not have VMware tools and some did. I also enabled worker processes on the forwarder where the DCN is configured.

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!