All Apps and Add-ons

splunk app for vmware and lockdown mode

chrisr97
Engager

Hi,

Does splunk for vmware work with esxi servers that are configured with lockdown mode? The installation document mentions creation of local accounts on the ESXi hosts. I guess that pretty much means that lockdown mode must be disabled and will not work with splunk app for vmware. Correct?

Thanks,

Chris

1 Solution

bbingham
Builder

Lockdown mode disables all access to the vsphere api. Even if you were to provide the root account information of the host, lockdown mode will still prevent us from gathering performance information from the hosts. In order to use the app to it's full capabilities, you are correct, you would need to disable lockdown mode.

View solution in original post

bbingham
Builder

Lockdown mode disables all access to the vsphere api. Even if you were to provide the root account information of the host, lockdown mode will still prevent us from gathering performance information from the hosts. In order to use the app to it's full capabilities, you are correct, you would need to disable lockdown mode.

chrisr97
Engager

That makes sense. Thanks for the response.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Using the Splunk Threat Research Team’s Latest Security Content

REGISTER HERE Tech Talk | Security Edition Did you know the Splunk Threat Research Team regularly releases ...

SplunkTrust | 2024 SplunkTrust Application Period is Open!

It's that time again, folks! That's right, the application/nomination period for the 2024 SplunkTrust is ...