All Apps and Add-ons

splunk app for vmware and lockdown mode

chrisr97
Engager

Hi,

Does splunk for vmware work with esxi servers that are configured with lockdown mode? The installation document mentions creation of local accounts on the ESXi hosts. I guess that pretty much means that lockdown mode must be disabled and will not work with splunk app for vmware. Correct?

Thanks,

Chris

1 Solution

bbingham
Builder

Lockdown mode disables all access to the vsphere api. Even if you were to provide the root account information of the host, lockdown mode will still prevent us from gathering performance information from the hosts. In order to use the app to it's full capabilities, you are correct, you would need to disable lockdown mode.

View solution in original post

bbingham
Builder

Lockdown mode disables all access to the vsphere api. Even if you were to provide the root account information of the host, lockdown mode will still prevent us from gathering performance information from the hosts. In order to use the app to it's full capabilities, you are correct, you would need to disable lockdown mode.

chrisr97
Engager

That makes sense. Thanks for the response.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...