Hi James. So far I implemented this yesterday, and it seems to be working. We have a vmware essentials plus license, so we can't use" distributed virtual switch". But if you have the license one above that, which I think is vmware enterprise, then you should be able to use one purview vm, and have a distributed virtual switch spanning across multiple vm hosts, for the EMC esa1 and purview etgh1 to plug into. If I remember correctly, I think this distributed virtual switch needs to be set to mirroring. This is all from what I've read, and unfortunately I can't confirm as I don't have the license.
From what I've done:
VM Host 1
-Analytics Purview 1 VM
-Standard Switch in promiscuous mode, using dedicated L2 port connected to our switch (EMC1 esa1, and Purview1 eth1 connected to this virtual switch)
-On our switch, I created a vlan, "analytics" to isolate traffic on this standard switch
VM Host 2
-Analytics Purview 2 VM
-Standard Switch in promiscuous mode (EMC2 esa1, and Purview2 eth1 connected to this virtual switch)
-On our switch, I created a vlan, "analytics2" to isolate traffic on this standard switch
-have netflow forward to Purview1
-have netflow forward to Purview 2
If you have any questions, let me know.