is there any splunk query to fetch vmware snapshots ?
VM snapshot was created 6 months ago during a change activity but not deleted after the change. Snapshot file grown huge and caused performance impact.
To Prevent:
- Check the feasibility in Splunk to detect snapshots of VMs which runs more than a week . If it is detected, Splunk to create automatic incident to technical support team (Windows / Unix / App owner)
Note, already all vCenters integrated in splunk for logs and performance monitoring.
