Splunk Enterprise
×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question

Vmware add on: Why did data stop coming from vcenter to splunk?

AShwin1119
Explorer
‎02-09-2023 07:12 AM

data stopped coming from vcenter to splunk.

not sure which DCN is used to configure those Vcenter, could you please help for troubleshooting like how to  check for the error (which cause data to stopped coming).

as well as how I can find out the DCN which is using to collect the data from Vcenter. 

Tags (1)
0 Karma
Reply

PaulPanther
Motivator
‎02-09-2023 11:16 PM

Do you get the data via the vcenter API that you're calling or via syslog? If you're pulling the data check the internal log source hydra_worker_ta_vmware_collection_worker_*.log for error messages.

0 Karma
Reply
Get Updates on the Splunk Community!

Enhance Your Splunk App Development: New Tools & Support

UCC FrameworkAdd-on Builder has been around for quite some time. It helps build Splunk apps faster, but it ...

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...