Security logs from VMware

rschutt · ‎08-16-2011

What is best practice to get VMware security logs into Splunk. They will not be send with Syslog but are only accessable from the console.

jimodonald · ‎08-16-2011

Splunk is working on a new VMware app which may or may not take that into account (I have no knowledge of what is in the app other than it is a work in progress.)

If you have a good programmer arond, they can write a program to follow the logs in the API and output them to Splunk. See the book VMware VI and vSphere SDK from Steve Jin for reference. Steve's blog, doublecloud.org, provides some information that may help also.

Jim

Security logs from VMware

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...

Index This | What has goals but no motivation?

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

Join the Conversation

Security logs from VMware

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...

Index This | What has goals but no motivation?

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security