Configure dumpAllThreads inputs for the Splunk Add-on for JBoss

Configure inputs for the Splunk Add-on for Jboss using Splunk Web or through configuration files using the information in the following input parameters tables.

After you configured the account, configure your inputs to collect data. Configure inputs on your data collection node, usually a heavy forwarder.

Configure Jboss inputs via Splunk web

1. In the Splunk Add-on for Jboss, select the Inputs tab.
2. Click Create New Input.

3. In the Add Input box, complete the following fields:

   Field	Description
   Name	Enter a unique name for the input.
   JBoss Account	Enter your Jboss account name.
   Collection Interval	The data collection interval, in seconds.
   Index	The index that stores the collected data from this input. The default index is main.

4. Click Save.

Configure Jboss inputs through inputs.conf

To configure inputs manually in inputs.conf, create stanzas using the following parameters and add them to $SPLUNK_HOME/etc/apps/Splunk_TA_jboss/local/inputs.conf. If the file or path does not exist, create it.

[jboss://<name>] account = <string> object_name = java.lang:type=Threading operation_name = dumpAllThreads signature = boolean, boolean params = true, true split_array = true duration = <integer>

If you want to use the default inputs, the default value of the inputs can be found in $SPLUNK_HOME/etc/apps/Splunk_TA_jboss/default/inputs.conf. You can copy the file to the local folder and edit it using the parameters table below.

Input parameters

Each attribute in the following table corresponds to a field in Splunk Web:

Attribute	Corresponding field in Splunk Web	Description
account	Jboss Account	Account from which data is to be collected.
object_name	ObjectName	The object name of the MBean on which the method is to be invoked. Supported is java.lang:type=Threading
operation_name	OperationName	The name of the operation to be invoked. Supported is dumpAllThreads
signature	Signature	Enter the java data types separated by comma. Supported is boolean, boolean
params	Parameters	Enter the values for the data types(entered in Signature) separated by comma. Supported is true, true
split_array	SplitArray	False] True to split up the whole data chunk into events and false if otherwise. Supported is true
duration	Collection Interval	Collection interval at which the data should be collected.
index	Index	The index in which to store Jboss input data. The default is default.

Validate file monitoring inputs

Validate that file monitoring inputs have been successfully created.

1. Go to Settings > Data inputs > Files & directories.

2. Click App in the column headings to organize the results by app name, then scroll to Splunk_TA_jboss in that column.

3. Review the files being monitored to ensure it is as you expect. They should be enabled by default.

Note

If you subsequently change the directory in which the log files are stored, generate new file monitoring inputs for the new location by using Settings > Data inputs > Files & directories page or update the local copy of inputs.conf file.

Validate data collection

To verify the add-on has been installed successfully and that all expected data is being ingested into the Splunk platform, run the following searches depending on which inputs you have configured.

Performance data and thread information:

Search

sourcetype=jboss:jmx

server.log:

Search

sourcetype=jboss:server:log

gc.log:

Search

sourcetype=jboss:gc:log

access.log:

Search

sourcetype=jboss:access:log