All Apps and Add-ons

How to change indexes in Splunk Add-on for VMware?

Kendo213
Communicator

This isn't an option through the UI of the application. How do you change the indexes where the data is flowing to?

0 Karma
1 Solution

renjith_nair
Legend

Hi @Kendo213,

You can change the index in inputs.conf of the application located in etc/apps/your_app_name/[default OR local]/inputs.conf

http://docs.splunk.com/Documentation/Splunk/7.1.1/admin/Inputsconf#GLOBAL_SETTINGS

For vmware performance index - https://docs.splunk.com/Documentation/AddOns/released/VMW/Collectionconfigurationfilereference

---
What goes around comes around. If it helps, hit it with Karma 🙂

View solution in original post

0 Karma

renjith_nair
Legend

Hi @Kendo213,

You can change the index in inputs.conf of the application located in etc/apps/your_app_name/[default OR local]/inputs.conf

http://docs.splunk.com/Documentation/Splunk/7.1.1/admin/Inputsconf#GLOBAL_SETTINGS

For vmware performance index - https://docs.splunk.com/Documentation/AddOns/released/VMW/Collectionconfigurationfilereference

---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma

Kendo213
Communicator

This doesn't seem to be the case with the Splunk Add-on for Vmware.

0 Karma

renjith_nair
Legend

Would you mind providing the name of the index you want to change? It will be easy for us then to point to the app and file

---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma

Kendo213
Communicator

The sourcetypes are coming in as vmware:perf:*

The index is vmware:perf

0 Karma

renjith_nair
Legend

Try changing the index in splunk-add-on-for-vmware_342\splunk-add-on-for-vmware_342\Splunk_TA_vmware\default\ta_vmware_collection.conf

Reference : https://docs.splunk.com/Documentation/AddOns/released/VMW/Collectionconfigurationfilereference

---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma
Get Updates on the Splunk Community!

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...

SOCin’ it to you at Splunk University

Splunk University is expanding its instructor-led learning portfolio with dedicated Security tracks at .conf25 ...

Credit Card Data Protection & PCI Compliance with Splunk Edge Processor

Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...