Settings for a connector of the vmware type are described in the following tables.
Basic settings tab
Setting
Description
Name
Unique name of the resource. Maximum length of the name: 128 Unicode characters.
Required setting.
Tenant
The name of the tenant that owns the resource.
Required setting.
Type
Connector type. You need to select vmware.
Required setting.
URL
URL of the VMware API. You need to include the hostname and port number in the URL. You can only specify one URL.
Required setting.
VMware credentials
Secret that stores the user name and password for connecting to the VMware API.
Required setting.
Client timeout
Time to wait after a request that did not return events before making a new request. The default value is 5 seconds. If you specify 0 , the default value is used.
Maximum number of events
Number of events requested from the VMware API in one request. The default value is 100. The maximum value is 1000.
Start timestamp
Starting date and time from which you want to read events from the VMware API. By default, events are read from the VMware API from the time when the collector was started. If started after the collector is stopped, the events are read from the last saved date.
TLS encryption mode using certificates in pem x509 format. Available values:
Disabled (default)—do not use TLS encryption.
Enabled means TLS encryption is used, but certificates are not verified.
Custom CA means TLS encryption is used with verification that the certificate was signed by a Certificate Authority. If you select this value, from the Custom CA drop-down list, select a secret with a certificate signed by the CA.
You can create a CA-signed certificate on the KUMA Core server (the following command examples use OpenSSL).
To create a certificate signed by a Certificate Authority:
Generate a key to be used by the Certificate Authority, for example:
openssl genrsa -out ca.key 2048
Create a certificate for the generated key, for example:
openssl req -new -x509 -days 365 -key ca.key -subj "/CN=<common host name of Certificate Authority>" -out ca.crt
Create a private key and a request to have it signed by the Certificate Authority, for example:
openssl req -newkey rsa:2048 -nodes -keyout server.key -subj "/CN=<common host name of KUMA server>" -out server.csr
Create the certificate signed by the Certificate Authority. You need to include the domain names or IP addresses of the server for which you are creating the certificate in the subjectAltName variable, for example:
Upload the generated server.crt certificate to the KUMA web interface into a secret of the certificate type, then select the secret of the certificate type in the Custom CA drop-down list.
To use KUMA certificates on third-party devices, you must change the certificate file extension from CERT to CRT. Otherwise, you can get the x509: certificate signed by unknown authority error.
When using TLS encryption, you cannot specify an IP address as the URL.