I am new to Splunk and we want to monitor our VMware environment. We installed the VMware app and add-on from Splunk to get data in. This is working, but the reports and dashboards are not what we need. It's too much and we only want some simple values.
I tried to build my own searches, but it's hard for me to find the data that I need.
Is there any explanation for how to work with the add-on data, or is there a better/simpler way to get the data from vSphere into Splunk?
To start simple, I want a search to show me the system's overall CPU consumption from all hosts in the last 4 hours.