All Apps and Add-ons

SSL comms for instrumenting JVM in the cloud

Skins
Path Finder

How best could this agent be used to instrument a JVM in the cloud ? (AWS) - how could we encrypt the data streamed to an on-prem instance of Splunk ?

via HEC ? we also intend to deploy a UF in the env to collect os (linux metrics etc) can you send the instrumented data to the UF then send that back to the on-prem instance ?

gratzi

0 Karma
1 Solution

Damien_Dallimor
Ultra Champion

Re: the JVM Agent...the example configuration file that ships with the agent shows how to use HEC as the transport

alt text

Re: forwarding options from a UF , outputs.conf reference is your friend 🙂 So you could forward cooked or uncooked data over TCP back to your on-premise indexers (firewalls permitting of course).

View solution in original post

0 Karma

Damien_Dallimor
Ultra Champion

Re: the JVM Agent...the example configuration file that ships with the agent shows how to use HEC as the transport

alt text

Re: forwarding options from a UF , outputs.conf reference is your friend 🙂 So you could forward cooked or uncooked data over TCP back to your on-premise indexers (firewalls permitting of course).

0 Karma

Skins
Path Finder

Thanks Damien - as both provide a solution - which would you use as a preference?

i would go with sending to the UF > index tier as that would require less config, a single data channel, less FW config?

would you concur?

0 Karma

Damien_Dallimor
Ultra Champion

I concur , simplest and least moving parts is always best.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...