I'm trying to use Splunk VMware app 2.0 and I'm trying to get data from ESXi hosts. I found a complication that the VMware app requires local accounts on each ESXi host to be able to perform TaskDiscovery, EventDiscovery, LogDiscovery and PerfDiscovery. I wonder if it's possible to connect to the ESXi hosts through vCenter, something like with "resxtop --server --vihost " to get all ESXi related metrics.
The reason, why I'm asking, is that I don't like the idea of using special local accounts on each ESXi host. The teams' responsibilities are strictly defined and Splunk admins are not admins of ActiveDirectory domains. To change a password every few weeks/months would require an effort of multiple people to deliver new credentials file to Splunk admins and update all ESXi hosts. Also the security policy is quite strict about that, Active Directory is much better choice.
... View more