Monitoring file which application 'locks' i.e. concurrent access causes application issues.

[stanwin]

We have the log files on AS400 box.

Getting them out of server is not the query. Need to understand for an application JD Edwards that is holding 'read lock' on file.

To clarify it isnt a lock per say rather, If any 3rd party tool tries to read file (live log) than application will get issues/unstable due to multiple log file read .
Oracle has declined support for this stating wont support 3rd party integrations. .

Was wondering if anyone has had any experience dealing with such type of file monitoring scenarios.

Below are options :
-intermediate copies/FTP is not best option due to file rollouts?
-Syslog /other forwarding agents will read the file leading to issues mentioned.

thanks
Stanwin

[stanwin · Accepted solution]

The solution for this is to FTP data onto intermediate server OR copy to different path where splunk can read them. .

In our case the application did not get affected if file was copied .

[pmdba]

Have you looked at the AS/400 app for Splunk? There are a number of related questions on this site, as well.

[stanwin]

It ONLY gets you AUDJRN data from the server, not actual application logs.