From b5d6295d3fb3f8f49253a0edf55e43c71056fe0f Mon Sep 17 00:00:00 2001 From: admingit Date: Fri, 28 Jul 2023 17:29:34 +0200 Subject: [PATCH] change_conf --- .../Splunk_TA_vcenter/local/inputs.conf | 64 +++++++++++++++++++ .../local/inframon_ta_vmware_config_ssl.conf | 2 + 2 files changed, 66 insertions(+) create mode 100644 deployment-apps/Splunk_TA_vcenter/local/inputs.conf create mode 100644 deployment-apps/Splunk_TA_vmware_inframon/local/inframon_ta_vmware_config_ssl.conf diff --git a/deployment-apps/Splunk_TA_vcenter/local/inputs.conf b/deployment-apps/Splunk_TA_vcenter/local/inputs.conf new file mode 100644 index 0000000..a31ca1d --- /dev/null +++ b/deployment-apps/Splunk_TA_vcenter/local/inputs.conf @@ -0,0 +1,64 @@ +# +# Copyright (C) 2005-2021 Splunk Inc. All Rights Reserved. +# +# Set disabled = 0 for the type and version of vcenter server in your environment. + + +#Please uncomment below stanza to receive events using Syslog +#[tcp://1517] +#connection_host = dns +#index = vmware-vclog +#sourcetype = vclog +#disabled = 0 + +#Please set disabled=0 for monitoring below log paths on a Windows vcenter server 6.x + +[monitor://$ALLUSERSPROFILE\VMware\vCenterServer\logs\vws] +disabled = 1 +index = vmware-vclog + +[monitor://$ALLUSERSPROFILE\VMware\vCenterServer\logs\vmware-vpx] +blacklist = (.*(gz)$)|(\\drmdump\\.*) +disabled = 1 +index = vmware-vclog + +[monitor://$ALLUSERSPROFILE\VMware\vCenterServer\logs\perfcharts] +disabled = 1 +index = vmware-vclog + +###From VMWare v3.4.5,support for vCenter Server 5.x has ended.### +#Please set disabled=0 for monitoring below log paths on a Windows vcenter server 5.x + +[monitor://$ALLUSERSPROFILE\Application Data\VMware\VMware VirtualCenter\Logs] +blacklist = (.*(gz)$)|(\\drmdump\\.*) +index = vmware-vclog +disabled = 1 + +[monitor://$PROGRAMFILES\VMware\Infrastructure\tomcat\logs] +sourcetype = vmware:vclog:tomcat +index = vmware-vclog +disabled = 1 + + +#Please set disabled=0 for monitoring below log paths on a Linux server appliance 6.x + +[monitor:///var/log/vmware/vws] +disabled = 0 +index = vmware-vclog + +[monitor:///var/log/vmware/vpxd] +blacklist = (.*(gz)$)|(\\drmdump\\.*) +disabled = 0 +index = vmware-vclog + +[monitor:///var/log/vmware/perfcharts] +disabled = 0 +index = vmware-vclog + +###From VMWare v3.4.5,support for vCenter Server 5.x has ended.### +#Please set disabled=0 for monitoring below log paths on a Linux server appliance 5.x + +[monitor:///var/log/vmware/vpx] +blacklist = (.*(gz)$)|(\\drmdump\\.*) +disabled = 0 +index = vmware-vclog \ No newline at end of file diff --git a/deployment-apps/Splunk_TA_vmware_inframon/local/inframon_ta_vmware_config_ssl.conf b/deployment-apps/Splunk_TA_vmware_inframon/local/inframon_ta_vmware_config_ssl.conf new file mode 100644 index 0000000..c9beb45 --- /dev/null +++ b/deployment-apps/Splunk_TA_vmware_inframon/local/inframon_ta_vmware_config_ssl.conf @@ -0,0 +1,2 @@ +[general] +validate_ssl_certificate = true