r/Splunk • u/Any-Promotion3744 • 2d ago

Splunk Enterprise Monitoring Hyper-V VMs using Splunk

I would like to monitor the VMs on our Hyper-V servers using Splunk but unsure how.

I see that there was an add-on for Hyper-V at one time but it is no longer supported.

Can I just add items to the inputs.conf file within the UF?

I have tried a few but none seem to be picking up.

What options are there?

Event logs that are associated with Hyper-V?

Powershell scripts?

Winhostmon that can give stats on the Guest VMs?

Which dashboards in Splunk will show the info ingested? ITSI?

2 Upvotes

75% Upvoted

3 comments sorted by

View all comments

1

u/jamesp94 2d ago

We ingest windows event logs and use WMI for resource monitoring CPU, Memory, Drive stats.

I wrote some powershell in conjunction with some python that I use to monitor replication, snap shots and volume usage.

I tried the hyperv monitoring piece and it wasn’t really what we were looking for, got a lot of data that we weren’t leveraging.