Security

Security logs from VMware

rschutt
Explorer

What is best practice to get VMware security logs into Splunk. They will not be send with Syslog but are only accessable from the console.

Tags (2)
0 Karma

jimodonald
Contributor

Splunk is working on a new VMware app which may or may not take that into account (I have no knowledge of what is in the app other than it is a work in progress.)

If you have a good programmer arond, they can write a program to follow the logs in the API and output them to Splunk. See the book VMware VI and vSphere SDK from Steve Jin for reference. Steve's blog, doublecloud.org, provides some information that may help also.

Jim

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...