Splunk® Supported Add-ons

Splunk Add-on for Tomcat

Acrobat logo Download manual as PDF


Acrobat logo Download topic as PDF

Release history for the Splunk Add-on for Tomcat

Latest release

The most recent versions of the Splunk Add-on for Tomcat is version 3.1.4. See Release notes for the Splunk Add-on for Tomcat for the release notes of this latest version.

Version 3.1.3

Version 3.1.3 of the Splunk Add-on for Tomcat was released on February 22, 2023.

Compatibility

Version 3.1.3 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.

Splunk software versions 8.1.x, 8.2.x, 9.0.x
CIM 5.0.1
Platforms Windows and Linux
Vendor Products Apache Tomcat 8.0, 8.5.61, 9.0.41, 10.0.12, and 10.0.23

The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.

For more information about the field alias configuration change, refer to the Splunk Enterprise Release Notes.

New features

  • Upgraded the third-party certifi library to version 2022.12.7
  • Fixed a security vulnerability found in the certifi library.

Fixed issues

Version 3.1.3 of the Splunk Add-on for Tomcat has the following fixed issues.


Known issues

Version 3.1.3 of the Splunk Add-on for Tomcat has the following known issues.


Third-party software attributions

Some of the components included in this add-on are licensed under free or open source licenses. We wish to thank the contributors to those projects.

A complete listing of third-party software information for this add-on is available as a text edit file for download:
Splunk Add-on for Tomcat third-party software credits.

Version 3.1.2

Version 3.1.2 of the Splunk Add-on for Tomcat was released on Nov 7, 2022.

Compatibility

Version 3.1.2 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.

Splunk software versions 8.1.x, 8.2.x, 9.0.x
CIM 5.0.1
Platforms Windows and Linux
Vendor Products Apache Tomcat 8.0, 8.5.61, 9.0.41, 10.0.12, and 10.0.23

The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.

For more information about the field alias configuration change, refer to the Splunk Enterprise Release Notes.

New features

  • Fixed a security vulnerability found in the commons-text library by upgrading its version from 1.9.0 to 1.10.0

Fixed issues

Version 3.1.2 of the Splunk Add-on for Tomcat has the following fixed issues.


Known issues

Version 3.1.2 of the Splunk Add-on for Tomcat has the following known issues.


Third-party software attributions

Some of the components included in this add-on are licensed under free or open source licenses. We wish to thank the contributors to those projects.

A complete listing of third-party software information for this add-on is available as a text edit file for download:
Splunk Add-on for Tomcat third-party software credits.

Version 3.1.1

Version 3.1.1 of the Splunk Add-on for Tomcat was released on Sept 20, 2022.

Compatibility

Version 3.1.1 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.

Splunk software versions 8.1.x, 8.2.x, 9.0.x
CIM 5.0.1
Platforms Windows and Linux
Vendor Products Apache Tomcat 8.0, 8.5.61, 9.0.41, 10.0.12, and 10.0.23

The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.

For more information about the field alias configuration change, refer to the Splunk Enterprise Release Notes.

New features

  • Support for Tomcat server version 10.0.23
  • CIM compatibility with version 5.0.1
  • Fixed multiple security vulnerabilities found in the fastjson, commons-configuration2 and log4j libraries:
    • Upgraded the fastjsonlog4j library from version 1.2.78 to 1.2.83
    • Upgraded the log4j library from version 2.16.0 to 2.18.0
    • Upgraded the commons-configuration2 library from version 2.7 to 2.8.0

Fixed issues

Version 3.1.1 of the Splunk Add-on for Tomcat has the following fixed issues.


Known issues

Version 3.1.1 of the Splunk Add-on for Tomcat has the following known issues.


Third-party software attributions

Some of the components included in this add-on are licensed under free or open source licenses. We wish to thank the contributors to those projects.

A complete listing of third-party software information for this add-on is available as a text edit file for download:
Splunk Add-on for Tomcat third-party software credits.


Version 3.0.2

The log4j library used in the Splunk Add-on for Tomcat was updated to version 2.16 in December 2021. Since then log4j has released version 2.17.1 which addresses additional vulnerabilities. These vulnerabilities are rated as moderate severity and the add-on does not use the affected code path. However, this add-on will be updated to the recommended version of 2.17.1 in an upcoming release.

Version 3.0.2 of the Splunk Add-on for Tomcat was released on Dec 17, 2022.

Compatibility

Version 3.0.2 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.

Splunk software versions 8/0x, 8.1.x, 8.2.x
CIM 4.20
Platforms Windows and Linux
Vendor Products Apache Tomcat 8.0, 8.5.61, 9.0.41, and 10.0.12

The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.

For more information about the field alias configuration change, refer to the Splunk Enterprise Release Notes.

New features

  • Upgraded the fastjson library from version 1.2.78 to 1.2.83.
  • Upgraded the log4j library from version 2.16.0 to 2.18.0.
  • Fixed a security vulnerability found in the fastjson and log4j library.

Fixed issues

Version 3.0.2 of the Splunk Add-on for Tomcat has the following fixed issues.

Known issues

Version 3.0.2 of the Splunk Add-on for Tomcat has the following known issues.


Third-party software attributions

Some of the components included in this add-on are licensed under free or open source licenses. We wish to thank the contributors to those projects.

A complete listing of third-party software information for this add-on is available as a text edit file for download:
Splunk Add-on for Tomcat third-party software credits.


Version 3.0.2

About this release

The log4j library used in the Splunk Add-on for Tomcat was updated to version 2.16 in December 2021. Since then log4j has released version 2.17.1 which addresses additional vulnerabilities. These vulnerabilities are rated as moderate severity and the add-on does not use the affected code path. However, this add-on will be updated to the recommended version of 2.17.1 in an upcoming release.

Version 3.0.2 of the Splunk Add-on for Tomcat was released on December 17, 2021.

Compatibility

Version 3.0.2 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.

Splunk software versions 8.0.x, 8.1.x, 8.2.x
CIM 4.20
Platforms Windows and Linux
Vendor Products Apache Tomcat 8.0, 8.5.61, 9.0.41, and 10.0.12

The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.

For more information about the field alias configuration change, refer to the Splunk Enterprise Release Notes.

New features

  • Upgraded the log4j library from version 2.15.0 to 2.16.0.
  • Fixed a security vulnerability found in the log4j library

Version 3.0.2

Version 3.0.2 fixed a security vulnerability found in the log4j library.

Fixed issues

Version 3.0.2 of the Splunk Add-on for Tomcat has the following fixed issues.

Known issues

Version 3.0.2 of the Splunk Add-on for Tomcat has the following known issues.


Third-party software attributions

Some of the components included in this add-on are licensed under free or open source licenses. We wish to thank the contributors to those projects.

A complete listing of third-party software information for this add-on is available as a PDF file for download:
Splunk Add-on for Tomcat third-party software credits.



Version 3.0.1

About this release

Version 3.0.1 of the Splunk Add-on for Tomcat was released on December 14, 2021.

Compatibility

Version 3.0.1 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.

Splunk software versions 8.0.x, 8.1.x, 8.2.x
CIM 4.20.0
Platforms Windows and Linux
Vendor Products Apache Tomcat 8.0, 8.5.61, 9.0.41, and 10.0.12

The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.

For more information about the field alias configuration change, refer to the Splunk Enterprise Release Notes.

New features

This release supports versions 3.0.1 of the Splunk Add-on for Tomcat.

Version 3.0.1

Version 3.0.1 fixed a security vulnerability found in the log4j library.

Fixed issues

Version 3.0.1 of the Splunk Add-on for Tomcat has the following fixed issues.

Known issues

Version 3.0.1 of the Splunk Add-on for Tomcat has the following known issues.

Third-party software attributions

Some of the components included in this add-on are licensed under free or open source licenses. We wish to thank the contributors to those projects.

A complete listing of third-party software information for this add-on is available as a PDF file for download:
Splunk Add-on for Tomcat third-party software credits.

Version 3.0.0

About this release

Version 3.0.0 of the Splunk Add-on for Tomcat was released on October 28, 2021.

Compatibility

Version 3.0.0 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.

Splunk software versions 8.0.x, 8.1.x, 8.2.x
CIM 4.20.0
Platforms Windows and Linux
Vendor Products Apache Tomcat 8.0, 8.5.61, 9.0.41, and 10.0.12

The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.

For more information about the field alias configuration change, refer to the Splunk Enterprise Release Notes.

New features

Version 3.0.0 of the Splunk Add-on for Tomcat has the following new features.

  • Migrated the TA from setup page to a fast and intuitive UI with an improved look and feel.
  • Support of the Tomcat server version 10.0.12.
  • Support of multiple accounts and multiple inputs.
  • Removed python2 support. Splunk only supports python3 for future releases.
  • Provided server validation while configuring the account on the configuration page.
  • Compatibility with CIM version 4.20.

Field changes

The following sections contain information on fields and data models that have been added, modified, or removed in this release.

Fields added and removed

No fields have been added or removed between Tomcat v2.1.0 and Tomcat v3.0.0.

Fields modified

Sourcetype CIM Field Operation Vendor Field Before Vendor field after Sample value before Sample value after
tomcat:access:log:splunk category <add> category category 78 image/gif
tomcat:access:log:splunk url_domain <add> url_domain url_domain ec2.splunkit.io i-test-instance.ec2.splunkit.io
tomcat:access:log:splunk http_referrer_domain <add> http_referrer_domain http_referrer_domain ec2.splunkit.io i-test-instance.ec2.splunkit.io

CIM changes

There is no CIM addition, modification, or removal between Tomcat v2.1.0 and Tomcat v3.0.0.

Fixed issues

Version 3.0.0 of the Splunk Add-on for Tomcat has the following fixed issues.

Known issues

Version 3.0.0 of the Splunk Add-on for Tomcat has the following known issues.


Date filed Issue number Description
2021-10-04 ADDON-42989, ADDON-21304 Getting "Config file: splunk_ta_tomcat_account does not exist." error in splunk_ta_tomcat_main.log on add-on installation

Workaround:
This error message can be ignored safely and once the account is configured, this error message will no longer be logged.

Third-party software attributions

Some of the components included in this add-on are licensed under free or open source licenses. We wish to thank the contributors to those projects.

A complete listing of third-party software information for this add-on is available as a PDF file for download:
Splunk Add-on for Tomcat third-party software credits.

Version 2.1.0

Version 2.1.0 of the Splunk Add-on for Tomcat was released on February 4, 2021. Version 2.1.0 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.

Splunk software versions 7.2.x, 7.3.x, 8.0.x, 8.1.x
CIM 4.18
Platforms Windows and Linux
Vendor Products Apache Tomcat 8.0, 8.5.61 and 9.0.41

The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.

For more information about the field alias configuration change, refer to the Splunk Enterprise Release Notes.

New features

Version 2.1.0 of the Splunk Add-on for Tomcat has the following new features.

  • Support for Apache Tomcat server latest version 9.0.41.
  • Added the new tomcat:access:log:splunk sourcetype to fully comply with the Web CIM model. Provided guidance on configuring Tomcat logging for this new sourcetype.
  • Compatibility with the OpenJDK 11 and OracleJDK 11.
  • Compatibility with the Common Information Model (CIM) version 4.18.
  • Enhanced UX through instant validations for the fields that are required on the setup page.

Fixed issues

Version 2.1.0 of the Splunk Add-on for Tomcat has the following fixed issues.


Date resolved Issue number Description
2021-01-06 ADDON-23979 Field version_number_tmp is not getting extracted for Tomcat version 9

Known issues

Version 2.1.0 of the Splunk Add-on for Tomcat has the following known issues.


Date filed Issue number Description
2019-02-04 ADDON-21204 tomcat_server.conf not correctly updating to reflect changes made on setup page in UI
2019-01-28 ADDON-21046 Setup page UI issue in Tomcat add-on 1.1.0
2016-03-17 ADDON-8342 Consistency required for field host on data from log files and in jmx url.
2015-09-07 ADDON-5383 Fails to generate eventgen data on Windows platform
2015-09-03 ADDON-5325 Support requireClientCert = true in server.conf.

Third-party software attributions

Version 2.1.0 of the Splunk Add-on for Tomcat incorporates the following third-party software or libraries.

Version 2.0.1

Version 2.0.1 of the Splunk Add-on for Tomcat was released on March 1, 2019. Version 2.0.1 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.

Splunk software versions 7.0.x, 7.1.x, 7.2.x, 8.0.x
CIM 4.13 or later
Platforms Windows and Linux
Vendor Products Apache Tomcat 8.x or later

New features

Version 2.0.1 of the Splunk Add-on for Tomcat has the following new features.

  • Default support for Python 3

Fixed issues

Version 2.0.1 of the Splunk Add-on for Tomcat has no fixed issues.

Known issues

Version 2.0.1 of the Splunk Add-on for Tomcat has the following known issues.


Date filed Issue number Description
2019-10-18 ADDON-23979 Field version_number_tmp is not getting extracted for Tomcat version 9
2019-02-04 ADDON-21204 tomcat_server.conf not correctly updating to reflect changes made on setup page in UI
2019-01-28 ADDON-21046 Setup page UI issue in Tomcat add-on 1.1.0
2019-01-22 ADDON-21010 Not passing validation checks in Splunk Cloud 7.0.x for GUI install
2016-03-17 ADDON-8342 Consistency required for field host on data from log files and in jmx url.
2015-09-07 ADDON-5383 Fails to generate eventgen data on Windows platform
2015-09-03 ADDON-5325 Support requireClientCert = true in server.conf.

Third-party software attributions

Version 2.0.1 of the Splunk Add-on for Tomcat incorporates the following third-party software or libraries.


Version 2.0.0

Version 2.0.0 of the Splunk Add-on for Tomcat was released on October 21, 2019. Version 2.0.0 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.

Splunk software versions 7.0.x, 7.1.x, 7.2.x, 8.0.x
CIM 4.13 or later
Platforms Windows and Linux
Vendor Products Apache Tomcat 8.x or later

New features

Version 2.0.0 of the Splunk Add-on for Tomcat has the following new features.

  • Support for Python 3

Fixed issues

Version 2.0.0 of the Splunk Add-on for Tomcat has no fixed issues.



Known issues

Version 2.0.0 of the Splunk Add-on for Tomcat has the following known issues.


Date filed Issue number Description
2019-10-18 ADDON-23979 Field version_number_tmp is not getting extracted for Tomcat version 9
2019-02-04 ADDON-21204 tomcat_server.conf not correctly updating to reflect changes made on setup page in UI
2019-01-28 ADDON-21046 Setup page UI issue in Tomcat add-on 1.1.0
2019-01-22 ADDON-21010 Not passing validation checks in Splunk Cloud 7.0.x for GUI install
2016-03-17 ADDON-8342 Consistency required for field host on data from log files and in jmx url.
2015-09-07 ADDON-5383 Fails to generate eventgen data on Windows platform
2015-09-03 ADDON-5325 Support requireClientCert = true in server.conf.


Third-party software attributions

Version 2.0.0 of the Splunk Add-on for Tomcat incorporates the following third-party software or libraries.

Version 1.1.0

About this release

Version 1.1.0 of the Splunk Add-on for Tomcat was released on April 1, 2016. Version 1.1.0 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.

Splunk software versions 6.5.x, 6.6.x, 7.0.x, 7.1.x, 7.2.x
CIM 4.2 or later
Platforms Windows and Linux
Vendor Products Apache Tomcat 8.x or later

New features

Version 1.1.0 of the Splunk Add-on for Tomcat has the following new features.

Date Issue number Description
2015-10-19 ADDON-6103 ITSI AppServer module integration: modify the Splunk Add-on for Tomcat to collect the necessary data for populating the inventory and recommended KPIs for ITSI AppServer module.
2016-03-16 ADDON-8322 Add the following new JMX templates to support mapping to the AppServer ITSI module: tomcat_connector, tomcat_global_request_processor, tomcat_webapp_class_loader, tomcat_manager.
2016-03-16 ADDON-8321 Add theTomcat version number and Tomcat application server saved searches.
2016-02-18 ADDON-7832 Add extraction and mapping for two additional fields: thread_id and thread_state.

Fixed issues

Version 1.1.0 of the Splunk Add-on for Tomcat has no fixed issues.

Known issues

Version 1.1.0 of the Splunk Add-on for Tomcat has the following known issues.

Date filed Issue number Description
2016-03-17 ADDON-8342 When configuring a JMX input using the "Use URL directly" method, the admin needs to use a hostname rather than an IP address so that the host field will be consistent.
2016-01-30 ADDON-7646 FIPS mode is not supported by this add-on. For a workaround, see Add-ons and FIPS mode in the Splunk Add-ons manual.
2016-01-13 ADDON-5325 requireClientCert=true in server.conf is not supported by add-ons using modular inputs and REST. If this setting is enabled in server.conf, communication is broken between the modular input and splunkd and the add-on stops collecting data. The following error appears in the splunkd.log: "SSL3_GET_CLIENT_CERTIFICATE:peer did not return a certificate." The workaround is to set requireClientCert=false.
2015-09-09 ADDON-5437 If the Splunk Add-on for ServiceNow or the Splunk Add-on for Box is installed and data inputs have been configured in one of these add-ons, then the inputs are disabled, the Splunk Add-on for JMX is unable to get data from a configured Tomcat server. This affects Splunk Add-on for JMX 3.0.2 or older.
2015-09-07 ADDON-5383 /APPSC-432 Fails to generate eventgen data on Windows platform.

Third-party software attributions

Version 1.1.0 of the Splunk Add-on for Tomcat incorporates the following third-party software or libraries.


Version 1.0.0

Version 1.0.0 of the Splunk Add-on for Tomcat has the same compatibility specifications as version 1.1.0.

New features

Version 1.0.0 of the Splunk Add-on for Tomcat had the following new feature.

Date Issue number Description
2015-09-10 ADDON-4795 Create a new add-on for Apache Tomcat java server.

Known issues

Version 1.0.0 of the Splunk Add-on for Tomcat had the following known issues.

Date filed Defect number Description
2016-01-30 ADDON-7646 FIPS mode is not supported by this add-on. For a workaround, see Add-ons and FIPS mode in the Splunk Add-ons manual.
2016-01-13 ADDON-5325 requireClientCert=true in server.conf is not supported by add-ons using modular inputs and REST. If this setting is enabled in server.conf, communication is broken between the modular input and splunkd and the add-on stops collecting data. The following error appears in the splunkd.log: "SSL3_GET_CLIENT_CERTIFICATE:peer did not return a certificate." The workaround is to set requireClientCert=false.
2015-09-09 ADDON-5437 If the Splunk Add-on for ServiceNow or the Splunk Add-on for Box is installed and data inputs have been configured in one of these add-ons, then the inputs are disabled, the Splunk Add-on for JMX is unable to get data from a configured Tomcat server. This affects Splunk Add-on for JMX 3.0.2 or older.

Third-party software attributions

Version 1.0.0 of the Splunk Add-on for Tomcat incorporated the following third-party software or libraries.

Last modified on 19 December, 2023
PREVIOUS
Release notes for the Splunk Add-on for Tomcat
 

This documentation applies to the following versions of Splunk® Supported Add-ons: released


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters