I have downloaded latest release of Splunk and am using a trial license.
Goal is to demo this to my team.
I have two Linux servers (RHEL 6.6)
Websphere 8.5.5 with Splunk forwarder on one, and Splunk Enterprise on the other.
I have followed the steps to allow WebSphere for jmx (I can see the mbeans in jconsole)
I have confirmed JAVA_HOME is set and is version 1.7
Python 2.7
I hope you can help. I've tried following a number of different Q/A's you have posted, but no luck.
I have two RHEL 6.6 servers (firewalls off) each running WebSphere 8.x. I have configured (I think correctly) the servers to enable jmx. If I try using jconsole, I can get the mbean data.
I try using the same search string in splunk, but I can't connect. when I look at the splunkd log, I see
07-18-2016 12:06:58.629 -0400 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SPLUNK4JMX/bin/jmx.py" It has been determined via the REST API that all inputs have been disabled
I saw a user have a similar error
https://answers.splunk.com/answers/215900/polling-failed-on-splunk4jmx.html
Not sure what he re-installed.
I've tried following this:
http://docs.splunk.com/Documentation/AddOns/released/IBMWAS/Configureinputs
When I do, and I log into splunk, I get this message in the alerts:
Unable to initialize modular input "jmx" defined inside the app "SPLUNK4JMX": Introspecting scheme=jmx: script running failed (exited with code 1).
When I look in the splunkd.log I see:
07-18-2016 12:25:17.056 -0400 ERROR SpecFiles - Modular input scheme "jmx://" first seen in "/opt/splunk/etc/apps/SPLUNK4JMX/README/inputs.conf.spec" has been redefined inside the spec file "/opt/splunk/etc/apps/Splunk_TA_jmx/README/inputs.conf.spec". Ignoring the redefinition.
still no luck.
Any thing you can offer?
I didn’t write Splunk_TA_jmx (https://splunkbase.splunk.com/app/2647/)
I wrote SPLUNK4JMX https://splunkbase.splunk.com/app/668/
2 entirely different apps.
Which App are you trying to use ?
Hi Damien,
I am just trying to use JMX in my current project implementation.
I hope purpose of the both apps specified below are same. Please clarify.
I didn’t write Splunk_TA_jmx (https://splunkbase.splunk.com/app/2647/)
I wrote SPLUNK4JMX https://splunkbase.splunk.com/app/668/
2 entirely different apps.
Let me try and rephrase so you understand.
I wrote SPLUNK4JMX.
As I did not write Splunk_TA_jmx , I do not know what it does.
Therefore I can not comment on whether the purpose of both apps are the same.
SPLUNK4JMX is the original app for JVM monitoring and the de facto standard used by most Splunk customers.
Brilliant!!! Thanks Damien for the quick turnaround.