Dave Convery's Blog

RE: SPLUNK! Goes the Syslog Server…

dconvery — Thu, 02 Jul 2009 15:06:48 GMT

Matt -
Check out SNARE -> http://www.dailyhypervisor.com/2009/07/02/setting-up-a-splunk-server-to-monitor-a-vmware-environment

Dave Convery
VMware vExpert 2009
http://www.dailyhypervisor.com
http://twitter.com/dconvery

Careful. We don't want to learn from this.
Bill Watterson, "Calvin and Hobbes"

RE: SPLUNK! Goes the Syslog Server…

MattG — Mon, 01 Jun 2009 18:32:03 GMT

Unfortunately, no. I am waiting for the Splunkbase VMware version that uses native VMw APIs. I was led to believe that it was coming some soon, but it is still not here.

-MattG

If you find this information useful, please award points for "correct" or "helpful".

RE: SPLUNK! Goes the Syslog Server…

dconvery — Mon, 01 Jun 2009 18:21:23 GMT

Matt -
Thanks for the info. Do you know of any logging server out there that can collect these logs with any efficiency? I know the Java app is clunky, but I didn't find anything that could collect logs via WMI AND plain text logs from Windows. Its a shame there is no sysloggin facility built into Windows.

Dave Convery
VMware vExpert 2009
http://www.dailyhypervisor.com

Careful. We don't want to learn from this.
Bill Watterson, "Calvin and Hobbes"

RE: SPLUNK! Goes the Syslog Server…

MattG — Mon, 01 Jun 2009 16:19:20 GMT

The current VMware app in Splunkbase base requires Java on the Splunk server and is clunky. I am anxiously awaiting an updated version that uses VMware native APIs to pull the data.
-MattG