Source types for the Splunk Add-on for IBM WebSphere Application Server

The Splunk Add-on for IBM WebSphere Application Server supplies or expects the following source types, depending on the data sources and collection methods that you configure: JMX events, HPEL logs, and other log files.

Collection method	Source type	Description	CIM data models	ITSI data models
Splunk Add-on for JMX	ibm:was:jmx	JMX Events for WebSphere	JVM, Inventory, Performance	Application Server, OS
Local HPEL log collection	ibm:was:hpel	HPEL logging. Supported for IBM WebSphere Application Server version 8.X only.	None	None
Local log file monitoring	ibm:was:manageprofiles	logs under manageprofile directory	None	None
	ibm:was:serverStatus	server status logs	None	None
	ibm:was:orbtrc	ORB trace logs	None	None
	ibm:was:serverExceptionLog	Server exception logs	None	None
	ibm:was:textLog	Logs in TextLog directory	None	None
	ibm:was:derby	Derby database logs	None	None
	ibm:was:ffdc	First Failure Data Capture logs	None	None
	ibm:was:startServerLog	Start server logs	None	None
	ibm:was:stopServerLog	Stop server logs	None	None
	ibm:was:systemOutLog	System out logs	None	None
	ibm:was:systemErrLog	System error logs	None	None
	ibm:was:nativeStdOutLog	Native stdout logs	None	None
	ibm:was:nativeStdErrLog	Native stderr logs	None	None
	ibm:was:profileCreationLog	Profile creation logs	None	None
	ibm:was:wsadminTraceout	wasadmin trace logs	None	None
	ibm:was:profileManagementLog	Profile management logs	None	None
	ibm:was:addNodeLog	App node addition logs	None	None
	ibm:was:activityLog	Activity logs	None	None
	ibm:was:httpErrorLog	http_error.log	None	None
	ibm:was:httpLog	http_access.log	Inventory, Performance	Application Server, OS
	ibm:was:serverIndex	serverindex.xml	Inventory	Application Server, OS
	ibm:was:gcLog	Garbage collection log (gc.log)	Inventory, Performance	Application Server, OS