vSphere
Visualize vSphere data and monitor changes through queries and alerts.
- Installation
- Authorization
- Data Model
- Release Notes
Installation
This integration supports VMware vSphere versions 6.5–8.0. Some data types are only available on newer versions:
- VM Guest Identity: vSphere 6.7.0 and newer
- Namespace ingestion: vSphere 7.0.0 and newer
- Distributed Switch ingestion: vSphere 7.0.0 and newer
Prerequisites
-
Access to a VMware vCenter instance with a service account that has the Read-Only role assigned at the root of the vCenter inventory (propagated to all children). The integration reads all inventory data using this account.
-
Your vCenter credentials:
- The vCenter domain (hostname), for example
vcenter.sddc-X-YY-ZZ-F.vmwarevmc.com - The service account login and password
- The vCenter domain (hostname), for example
Configuration in JupiterOne
To install the VMware vSphere integration in JupiterOne, navigate to Integrations, select VMware vSphere, and click New Instance.
Creating an instance requires the following:
- Account Name — a display name for this vSphere account in JupiterOne. Ingested entities will have this value stored in
tag.AccountNamewhen theAccountNametoggle is enabled. - Description — optional label for this integration instance.
- Polling Interval — how often JupiterOne collects data from vSphere. Set to
DISABLEDto run manually. - vSphere Domain — the hostname of your vCenter server (for example,
vcenter.sddc-X-YY-ZZ-F.vmwarevmc.comfor a VMware Cloud-hosted vCenter). - vCenter Login — the login or email address of the service account.
- vCenter Password — the password for the service account.
Click Create once all required values are provided.
Optional configuration
| Field | Description | Default |
|---|---|---|
| Uses NSX | When enabled, the integration queries distributed switch compatibility using VMware NSX (NSXT_CONTAINER_PLUGIN) as the network provider instead of standard vSphere networking. Enable this if your environment uses VMware NSX for Kubernetes workload networking. | Disabled |
| Disable TLS Verification | When enabled, TLS certificate verification is skipped for connections to the vCenter host. Use this only for vCenter hosts that cannot present a valid certificate (for example, those using self-signed certificates). | Disabled |
Disabling TLS verification reduces transport security. Use a valid TLS certificate on your vCenter host whenever possible.
Next steps
Once configured, the integration will run on the polling interval you selected and populate vSphere inventory data in JupiterOne. See the Instance management guide to learn how to edit or disable an integration instance.
Entities
The following entities are created:
| Resources | Entity _type | Entity _class |
|---|---|---|
| Account | vsphere_client | Application |
| Cluster | vsphere_cluster | Cluster |
| Data Center | vsphere_data_center | Group |
| Datastore | vsphere_datastore | DataStore |
| Distributed Switch | vsphere_distributed_switch | Configuration |
| Host | vsphere_host | Host |
| Namespace | vsphere_namespace | Group |
| Network | vsphere_network | Network |
| Virtual Machine | vsphere_vm | Host |
Relationships
The following relationships are created:
Source Entity _type | Relationship _class | Target Entity _type |
|---|---|---|
vsphere_client | MANAGES | vsphere_data_center |
vsphere_cluster | USES | vsphere_distributed_switch |
vsphere_vm | USES | vsphere_network |
Release Notes
- 2026-07-17 — vSphere virtual machines are now classified as hosts and participate in unified device correlation, using hostname, IP addresses, MAC addresses, and BIOS UUID for matching.