Splunk® Supported Add-ons

Splunk Add-on for Tomcat

Acrobat logo Download manual as PDF

Acrobat logo Download topic as PDF

Source types for the Splunk Add-on for Tomcat

The Splunk Add-on for Tomcat supports the following data sources. All access logs that need to be CIM-Compliant should use the tomcat:access:log:splunk sourcetype.

Data source Collection method source type CIM data models ITSI data models
Thread information from JMX MBean operations Modular input (dumpAllThreads) tomcat:jmx JVM, Performance Application Server data model objects: Inventory, Performance
Performance metrics from JMX MBean attributes Splunk Add-on for JMX
Catalina*.log, localhost*.log, manager*.log, host-manager*.log File monitoring tomcat:runtime:log N/A Application Server data model object: Inventory
localhost_access_log_splunk*.txt File monitoring tomcat:access:log:splunk Web localhost_access_log*.txt
localhost_access_log*.txt File monitoring tomcat:access:log N/A Application Server data model objects: Inventory, Performance

You can view the recommended fields section to collect data using the tomcat:access:log:splunk sourcetype.

Last modified on 24 February, 2023
Lookups for the Splunk Add-on for Tomcat
Release notes for the Splunk Add-on for Tomcat

This documentation applies to the following versions of Splunk® Supported Add-ons: released

Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters