Can Splunk monitor a WebSphere Application Server cluster ?

[mdobbie]

We are trying to get Splunk to monitor a cluster of federated WebSphere Application Server v6.1 instances, which are centrally managed through a WebSphere Network Deployment (ND) Admin Console. Does the Splunk WebSphere plugin support this kind of configuration ?

[esachs]

The Splunk for WebSphere Application Server app does support multiple profiles/servers on each physical server. We have updated the documentation to be a little more helpful for setting up a distributed environment.

The app does not currently support getting PMI data from other machines via the WebSphere Deployment Manager. I believe that even if metrics are gathered through the deployment manager, a local process has to be run on each physical machine.

[mdobbie]

We would like to monitor both the logs and PMI on each application server instance in our cell. The IBM documentation indicates we should access the PMI data via the WebSphere Deployment Manager instance, through which the cell members are proxied. The logs are local to each application server. We have also scaled both horizontally and vertically, so we have two application server instances on each physical server, and 5 physical servers per cell.

[Genti]

specificlly: Do you want to monitor logs only? Monitor config files? JVM Metrics? All of the above? Where do the logs reside, i assume locally on each of the websphere application server instances? Is the websphere ND admin console going to generate logs as well, or is it only managing the server instances?

[Genti]

mdobbie, can you be more specific: 1- what are you trying to achieve, 2- what are you intending to monitor? I believe what you ask can be supported, but more info is needed before we give a more complete answer.