All Apps and Add-ons

Splunk Add-On for Tomcat: Search Head not working

TitanAE
New Member

I deployed the Tomcat Add-On for Splunk. It's currently running on both my indexer and search head.

It's working without issue on the indexer. But it's not displaying the data in the correct format on the search head. And I'm not sure what to do to fix this issue:

I've checked to make sure the data is in the correct format for the forwarder
I've checked the permissions on the server, they're correct
I've recreated my environment to spec...

I've done everything except get the bloody thing to work. I need help.

0 Karma

mbagali_splunk
Splunk Employee
Splunk Employee

@TitanAE,

This add-on has 3 logs that are located at $SPLUNK_HOME/var/log/splunk:

splunk_ta_tomcat_main.log
splunk_ta_tomcat_setup.log
splunk_ta_tomcat_util.log

Have you checked this to figure out what is wrong?

https://docs.splunk.com/Documentation/AddOns/released/Tomcat/Troubleshoot

amitm05
Builder

Can you be more precise on data not being in correct format. This will help the community in answering with most relevance.
Have you checked for all the compatibility versions, Splunk, Addon, CIM etc. ?

0 Karma
Get Updates on the Splunk Community!

Updated Team Landing Page in Splunk Observability

We’re making some changes to the team landing page in Splunk Observability, based on your feedback. The ...

New! Splunk Observability Search Enhancements for Splunk APM Services/Traces and ...

Regardless of where you are in Splunk Observability, you can search for relevant APM targets including service ...

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...