All Apps and Add-ons

Suppressing an write-only attribute in Splunk for JMX

dcparker
Path Finder

Hello,

I am using the Splunk for JMX app to monitor my Cassandra cluster and it's awesome. However, I do get an error in the splunk logs that I would like to get rid of.

Here's what happens: I am monitoring the entire mbean domain using:

<mbean domain="org.apache.cassandra.db" properties="*" dumpAllAttributes="true"/>

However, there is a single attribute in there that seems to be write-only:

01-21-2014 11:14:22.251 -0600 ERROR ExecProcessor - message from "python /opt/splunkforwarder/etc/apps/jmx_ta/bin/jmx.py" Error executing JMX stanza jmx://cassandra : Write-only attribute: CrcCheckChance

My question - is there a way to tell it to exclude that attribute or ignore the error? I could go through and list every property in that domain I suppose, but there are a ton and all of them are useful. The only problem is this error. Any help would be greatly appreciated!

PS - everything works fine even though this error is there, I would just like to get rid of it since it happens every call.

0 Karma
1 Solution

Damien_Dallimor
Ultra Champion

OK , I have released a new version (2.0.4) with this feature. Enjoy !

View solution in original post

Damien_Dallimor
Ultra Champion

OK , I have released a new version (2.0.4) with this feature. Enjoy !

dcparker
Path Finder

awesome, thank you!

0 Karma

Damien_Dallimor
Ultra Champion

dumpAllAttributes doesn't have any filtering capability currently.

I could add some code so that only "readable" attributes are polled when doing a bulk dump, there is a convenient method for this in the JMX API.

I'll put this on the TODO list and make a new release ASAP.

dcparker
Path Finder

That would be awesome, thank you!

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...