Splunk® Common Information Model Add-on

Common Information Model Add-on Manual

This documentation does not apply to the most recent version of Splunk® Common Information Model Add-on. For documentation on the most recent version, go to the latest release.

Java Virtual Machines (JVM)

The fields in the JVM data model and Java Virtual Machines event category describe generic Java server platforms. Tags used with the Java Virtual Machines event category
Object name(s) Tag name Required?
Classloading classloading YES
Compilation compilation YES
JVM jvm YES
Operating System os YES
Memory memory YES
Threading threading YES
Runtime runtime YES

Fields for the Java Virtual Machines event category

Object name(s) Field name Data type Description Possible values
Classloading current_loaded int The current count of classes loaded in the JVM
Classloading total_loaded int The total count of classes loaded in the JVM
Classloading total_unloaded int The total count of classes unloaded from the JVM
Compilation compilation_time int Time taken by JIT compilation.
dest string The system where the JVM is running. May be aliased from more specific fields, such as dest_host, dest_ip, or dest_name.
JVM jvm_description string A description field provided in some data sources.
JVM tag string This automatically generated field is used to access tags from within datamodels. Add-on builders do not need to populate it.
jvm_name string The name of the JVM, such as HotSpot.
jvm_process_name string The process name of the JVM, such as java.exe.
jvm_uptime int The JVM's current uptime, in seconds.
jvm_vendor string The vendor of the JVM, such as Oracle.
jvm_version string The version of the JVM, such as 1.6.0_45.
Memory heap_committed int Committed amount of heap memory used by the JVM
Memory heap_init int Initial amount of heap memory used by the JVM
Memory heap_max int Maximum amount of heap memory used by the JVM
Memory heap_used int Heap memory used by the JVM
Memory non_heap_committed int Committed amount of non-heap memory used by the JVM
Memory non_heap_init int Initial amount of non-heap memory used by the JVM
Memory non_heap_max int Maximum amount of non-heap memory used by the JVM
Memory non_heap_used int Non-heap memory used by the JVM
Memory objects_pending int Number of objects pending in the JVM
OS committed_memory int Amount of memory committed to the JVM
OS cpu_time int Amount of CPU time taken by the JVM
OS free_physical_memory int Amount of free physical memory remaining to the JVM
OS free_swap int Amount of free swap memory remaining to the JVM
OS max_file_descriptors int Maximum file descriptors available to the JVM
OS open_file_descriptors int Number of file descriptors opened by the JVM
OS os string OS that the JVM is running on
OS os_architecture string OS architecture that the JVM is running on
OS os_version string OS version that the JVM is running on
OS physical_memory int Physical memory available to the OS that the JVM is running on
OS swap_space int Swap memory space available to the OS that the JVM is running on
OS system_load int System load of the OS that the JVM is running on
OS total_processors int Total processor cores available to the OS that the JVM is running on
Runtime start_time timestamp Start time of the JVM process
Runtime process_name string Process name of the JVM process
Runtime product string The JVM product or service. This field is used to automatically produce the vendor_product field used by data models.
Runtime uptime int Uptime of the JVM process
Runtime vendor string The vendor of the JVM. This field is used to automatically produce the vendor_product field used by data models.
Runtime version string Version of the JVM.
Threading cm_enabled boolean Indicates whether thread contention monitoring is enabled true, false
Threading cm_supported boolean Indicates whether the JVM supports thread contention monitoring true, false
Threading cpu_time_enabled boolean Indicates whether thread CPU time measurement is enabled true, false
Threading cpu_time_supported boolean Indicates whether the Java virtual machine supports CPU time measurement for the current thread true, false
Threading current_cpu_time int CPU-space time taken by the JVM, in seconds.
Threading current_user_time int User-space time taken by the JVM, in seconds
Threading daemon_thread_count int The JVM's current daemon count
Threading omu_supported boolean Indicates whether the JVM supports monitoring of object monitor usage true, false
Threading peak_thread_count int
started_at timestamp The JVM's start time.
Threading sync_supported boolean Indicates whether the JVM supports monitoring of ownable synchronizer usage true, false
Threading thread_count int The JVM's current thread count
thread_peak int The JVM's peak thread count
Threading threads_started int The total number of threads started in the JVM
Last modified on 22 October, 2013
Intrusion Detection   Malware

This documentation applies to the following versions of Splunk® Common Information Model Add-on: 3.0, 3.0.1, 3.0.2


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters