I guess there are two parts to this question:
1. what is the groups experience with VMWare based Splunk deployments especially around using VCentre to keep indexers and analysers up assuming the data is on a SAN?
2. Has anyone attempted to use VSphere to gain improved availability by replicating images including indexed data between datacentres and then switching over when the primary datacentre fails
Nope but I'm part way through the process of validation so I will update when we have confirmation that this remotely works the way I expect it should.
