All Apps and Add-ons

SSL comms for instrumenting JVM in the cloud

Skins
Path Finder

How best could this agent be used to instrument a JVM in the cloud ? (AWS) - how could we encrypt the data streamed to an on-prem instance of Splunk ?

via HEC ? we also intend to deploy a UF in the env to collect os (linux metrics etc) can you send the instrumented data to the UF then send that back to the on-prem instance ?

gratzi

0 Karma
1 Solution

Damien_Dallimor
Ultra Champion

Re: the JVM Agent...the example configuration file that ships with the agent shows how to use HEC as the transport

alt text

Re: forwarding options from a UF , outputs.conf reference is your friend 🙂 So you could forward cooked or uncooked data over TCP back to your on-premise indexers (firewalls permitting of course).

View solution in original post

0 Karma

Damien_Dallimor
Ultra Champion

Re: the JVM Agent...the example configuration file that ships with the agent shows how to use HEC as the transport

alt text

Re: forwarding options from a UF , outputs.conf reference is your friend 🙂 So you could forward cooked or uncooked data over TCP back to your on-premise indexers (firewalls permitting of course).

0 Karma

Skins
Path Finder

Thanks Damien - as both provide a solution - which would you use as a preference?

i would go with sending to the UF > index tier as that would require less config, a single data channel, less FW config?

would you concur?

0 Karma

Damien_Dallimor
Ultra Champion

I concur , simplest and least moving parts is always best.

0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...