Splunk® IT Service Intelligence

Modules

Splunk IT Service Intelligence (ITSI) version 4.11.x reached its End of Life on December 6, 2023. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see Before you upgrade IT Service Intelligence.
This documentation does not apply to the most recent version of Splunk® IT Service Intelligence. For documentation on the most recent version, go to the latest release.

Application Server Module data model reference table

Use the below tables as a reference for the data models of this module. The tables contain a breakdown of the required tags for the event objects or searches in that model, and a listing of all extracted and calculated fields included in the model. Data models can be edited by navigating to Settings > Data models

For information on how to map your data to the data models available in the Splunk IT Service Intelligence, see the below links:

Tags used with event datasets

The following tags act as constraints to identify your events as being relevant to this data model.

Dataset name Tag name (Constraint) Tag name (Inherited)
Performance appserver, performance
|____ Web Transaction
transactions appserver, performance
|____ Runtime
runtime appserver, performance
|____ Throughput
throughput appserver, performance
|____ Session
session appserver, performance
Inventory appserver, inventory
|____ Application
application appserver, inventory

Fields for Application Server event objects

The following table lists the extracted and calculated fields for the event objects in the model. Note that it does not include any inherited fields.

Dataset name Field name Data type Description
Performance application_name string Name of the application.
Performance application_server string The key to identify an application server installation.
Performance appserver_port_number number The listening port of the web server associated with the application server.
Performance vendor_product string The vendor and product or service that is being monitored.
Performance application_instance string
Web Transaction response_code number HTTP status code from the web server.
Web Transaction response_time number Response time (in milliseconds).
Runtime available_threads_count_percent number The number of available threads, listed by percent.
Runtime cpu_utilization_percent number Percentage of CPU utilized.
Runtime garbage_collection_count number Count of garbage collections.
Runtime garbage_collection_time number Time used in a garbage collection occurrence.
Runtime memory_heap_free_percent number Percentage of free memory available on the heap (in MB).
Runtime memory_heap_size number Memory that is allocated for the heap (in MB).
Runtime memory_heap_used number Memory used on the heap (in MB).
Runtime memory_pool_size number Size of the memory pool (in MB).
Runtime memory_used number Size of the memory used (in MB).
Runtime perm_gen_usage number PermGen usage (in MB).
Runtime thread_id number ID of a thread (available for Tomcat only).
Runtime thread_state string State of a thread (available for WebSphere only).
Runtime is_active_thread_tomcat number The number of active Tomcat threads.
Runtime is_hung_thread_tomcat number The number of hung Tomcat threads.
Throughput request_count number The current number of requests
Session active_sessions_count number The number of active sessions
Session expired_sessions_count number The number of expired sessions
Session rejected_sessions_count number The number of rejected sessions
Inventory application_server string The key to identify an application server installation.
Inventory appserver_port_number number The listening port of the web server associated with the application server.
Inventory full_host_name string Full name of the server hosting the application server.
Inventory ip_address string IP address of the machine hosting the application server.
Inventory product_family string Product family (e.g., Tomcat or WebSphere)
Inventory runtime_vendor string Vendor of the runtime (e.g., JVM) on which the application server runs on.
Inventory vendor_product string Apache Tomcat, or, IBM WebSphere Application Server.
Inventory vendor_product_runtime string The runtime (e.g., JVM) on which the application server runs on.
Inventory vendor_product_runtime_version string Version number of the runtime (e.g., JVM) on which the application server runs on.
Inventory version_number string Version number of the vendor product.
Inventory root_role string
Application application_name string Name of the application.
Application leaf_role string
Application application_instance string
Last modified on 28 April, 2023
Learn more about the Application Server Module   Application Server Module troubleshooting

This documentation applies to the following versions of Splunk® IT Service Intelligence: 4.11.0, 4.11.1, 4.11.2, 4.11.3, 4.11.4, 4.11.5, 4.11.6, 4.12.0 Cloud only, 4.12.1 Cloud only, 4.12.2 Cloud only, 4.13.0, 4.13.1, 4.13.2, 4.13.3, 4.14.0 Cloud only, 4.14.1 Cloud only, 4.14.2 Cloud only, 4.15.0, 4.15.1, 4.15.2, 4.15.3, 4.16.0 Cloud only, 4.17.0, 4.17.1, 4.18.0, 4.18.1


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters