Splunk easily crosses tiers throughout the entire virtual stack - both inside and outside of the VM - to give you a complete picture of availability. Splunk indexes all IT data across every tier - the physical servers, hypervisor, VMs, and deployed applications, capturing and persisting 100% of your data in real-time. Powerful search and navigation lets you trace performance problems and errors across components. Visibility across VMs highlights resource competition issues. Flexible alerting and reporting give you continuous visibility and monitoring of changing virtual environments. Whether you're testing a new virtualization rollout or managing an existing infrastructure, Splunk puts you back in control.
Why Splunk for Server Virtualization Management?
- Get a comprehensive view of 100% of your IT data - server, hypervisor, VM, guest OS, applications, network, and more.
- Increase visibility even with the greater complexity of virtualized environments.
- Optimize your initial planning and ongoing use of virtualization.
- Retain data from transient guests for root cause analysis and compliance.
Splunk's unique approach of indexing the entire IT infrastructure, both legacy and virtualized, enables end-end diagnostics and tuning to increase ROI. This is particularly powerful in today's datacenter that continue to carry the baggage of legacy non-virtualization applications while making a rapid transition to virtualization.
- Shaw Chuang, former Director of R&D for VMware ESX
Use Splunk for:
Virtualization Planning
Splunk helps with planning even before the first hypervisor is loaded. Use Splunk reports for historical app and OS activity and utilization to identify good targets for virtualization. Splunk shows you a historical view of the apps with spiky workloads and the hosts with underutilized available resources., helping you marry the tasks and resources faster, instead of guessing through your first deployments.
Workload Optimization
Once your virtualization environment is running, Splunk helps you optimize it. Use reports in Splunk across all tiers to track actual utilization and application performance to identify both application contention issues and lingering resource inefficiencies.
Performance Monitoring
Splunk acts as a great monitoring tool since it indexes 100% of your IT data - inside and outside of your virtualization environment. You can schedule searches and alerts in Splunk to generate alarms on performance thresholds based on data gathered from the VMWare CIM and Citrix Xen Management API about the VM, guests, physical hosts, and virtual and physical network interfaces. Splunk also includes pre-built searches and reports that monitor key virtualization metrics.
Splunk can alert you when your VMs or guest OSs are short on free memory for too long. You can extend monitoring based on the outcome of root cause analysis: schedule alerts via email, warnings via RSS, or send events to consoles and ticketing systems.
Root Cause Analysis
Splunk is the answer when IT staff asks "where did that instance go?" Use Splunk to index IT data historically from all tiers as instances come and go to do root cause analysis. Then tie real application errors and perf problems to information about the state of the underlying VM and other guests. Even if the environment changed between the problem occurring and the investigation beginning, Splunk still indexed it, and can help you solve it.
Take a common scenario: users complain about intermittent CRM app performance issues. Splunk can pinpoint the exact times and application server instances where performance fell below a threshold, then correlate it with configuration history captured from the virtualization platform APIs. Now you know which other guests shared the same physical hosts, can identify the I/O utilization hog, and even trend the I/O utilization of all of the guests over time.
Log Management
Splunk closes the gap in meeting log management requirements in virtualized environments. Unlike traditional log management solutions, Splunk securely and remotely captures all IT data in real time, even application logfiles, so you can meet log centralization and monitoring requirements even for applications deployed on transient virtual hosts.
