Application Server Module data model reference table
Use the below tables as a reference for the data models of this module. The tables contain a breakdown of the required tags for the event objects or searches in that model, and a listing of all extracted and calculated fields included in the model. Data models can be edited by navigating to Settings > Data models
For information on how to map your data to the data models available in the Splunk IT Service Intelligence, see the below links:
- How to use these reference tables in the Common Information Model Add-on Manual.
- About data models in the Splunk Enterprise Knowledge Manager Manual.
Tags used with event datasets
The following tags act as constraints to identify your events as being relevant to this data model.
Dataset name | Tag name (Constraint) | Tag name (Inherited) |
---|---|---|
Performance | appserver, performance | |
|
transactions | appserver, performance |
|
runtime | appserver, performance |
|
throughput | appserver, performance |
|
session | appserver, performance |
Inventory | appserver, inventory | |
|
application | appserver, inventory |
Fields for Application Server event objects
The following table lists the extracted and calculated fields for the event objects in the model. Note that it does not include any inherited fields.
Dataset name | Field name | Data type | Description |
---|---|---|---|
Performance | application_name
|
string | Name of the application. |
Performance | application_server
|
string | The key to identify an application server installation. |
Performance | appserver_port_number
|
number | The listening port of the web server associated with the application server. |
Performance | vendor_product
|
string | The vendor and product or service that is being monitored. |
Performance | application_instance
|
string | |
Web Transaction | response_code
|
number | HTTP status code from the web server. |
Web Transaction | response_time
|
number | Response time (in milliseconds). |
Runtime | available_threads_count_percent
|
number | The number of available threads, listed by percent. |
Runtime | cpu_utilization_percent
|
number | Percentage of CPU utilized. |
Runtime | garbage_collection_count
|
number | Count of garbage collections. |
Runtime | garbage_collection_time
|
number | Time used in a garbage collection occurrence. |
Runtime | memory_heap_free_percent
|
number | Percentage of free memory available on the heap (in MB). |
Runtime | memory_heap_size
|
number | Memory that is allocated for the heap (in MB). |
Runtime | memory_heap_used
|
number | Memory used on the heap (in MB). |
Runtime | memory_pool_size
|
number | Size of the memory pool (in MB). |
Runtime | memory_used
|
number | Size of the memory used (in MB). |
Runtime | perm_gen_usage
|
number | PermGen usage (in MB). |
Runtime | thread_id
|
number | ID of a thread (available for Tomcat only). |
Runtime | thread_state
|
string | State of a thread (available for WebSphere only). |
Runtime | is_active_thread_tomcat
|
number | The number of active Tomcat threads. |
Runtime | is_hung_thread_tomcat
|
number | The number of hung Tomcat threads. |
Throughput | request_count
|
number | The current number of requests |
Session | active_sessions_count
|
number | The number of active sessions |
Session | expired_sessions_count
|
number | The number of expired sessions |
Session | rejected_sessions_count
|
number | The number of rejected sessions |
Inventory | application_server
|
string | The key to identify an application server installation. |
Inventory | appserver_port_number
|
number | The listening port of the web server associated with the application server. |
Inventory | full_host_name
|
string | Full name of the server hosting the application server. |
Inventory | ip_address
|
string | IP address of the machine hosting the application server. |
Inventory | product_family
|
string | Product family (e.g., Tomcat or WebSphere) |
Inventory | runtime_vendor
|
string | Vendor of the runtime (e.g., JVM) on which the application server runs on. |
Inventory | vendor_product
|
string | Apache Tomcat, or, IBM WebSphere Application Server. |
Inventory | vendor_product_runtime
|
string | The runtime (e.g., JVM) on which the application server runs on. |
Inventory | vendor_product_runtime_version
|
string | Version number of the runtime (e.g., JVM) on which the application server runs on. |
Inventory | version_number
|
string | Version number of the vendor product. |
Inventory | root_role
|
string | |
Application | application_name
|
string | Name of the application. |
Application | leaf_role
|
string | |
Application | application_instance
|
string |
Learn more about the Application Server Module | Application Server Module troubleshooting |
This documentation applies to the following versions of Splunk® IT Service Intelligence: 4.11.0, 4.11.1, 4.11.2, 4.11.3, 4.11.4, 4.11.5, 4.11.6, 4.12.0 Cloud only, 4.12.1 Cloud only, 4.12.2 Cloud only, 4.13.0, 4.13.1, 4.13.2, 4.13.3, 4.14.0 Cloud only, 4.14.1 Cloud only, 4.14.2 Cloud only, 4.15.0, 4.15.1, 4.15.2, 4.15.3, 4.16.0 Cloud only, 4.17.0, 4.17.1, 4.18.0, 4.18.1
Feedback submitted, thanks!