All Apps and Add-ons

Suppressing an write-only attribute in Splunk for JMX

dcparker
Path Finder

Hello,

I am using the Splunk for JMX app to monitor my Cassandra cluster and it's awesome. However, I do get an error in the splunk logs that I would like to get rid of.

Here's what happens: I am monitoring the entire mbean domain using:

<mbean domain="org.apache.cassandra.db" properties="*" dumpAllAttributes="true"/>

However, there is a single attribute in there that seems to be write-only:

01-21-2014 11:14:22.251 -0600 ERROR ExecProcessor - message from "python /opt/splunkforwarder/etc/apps/jmx_ta/bin/jmx.py" Error executing JMX stanza jmx://cassandra : Write-only attribute: CrcCheckChance

My question - is there a way to tell it to exclude that attribute or ignore the error? I could go through and list every property in that domain I suppose, but there are a ton and all of them are useful. The only problem is this error. Any help would be greatly appreciated!

PS - everything works fine even though this error is there, I would just like to get rid of it since it happens every call.

0 Karma
1 Solution

Damien_Dallimor
Ultra Champion

OK , I have released a new version (2.0.4) with this feature. Enjoy !

View solution in original post

Damien_Dallimor
Ultra Champion

OK , I have released a new version (2.0.4) with this feature. Enjoy !

dcparker
Path Finder

awesome, thank you!

0 Karma

Damien_Dallimor
Ultra Champion

dumpAllAttributes doesn't have any filtering capability currently.

I could add some code so that only "readable" attributes are polled when doing a bulk dump, there is a convenient method for this in the JMX API.

I'll put this on the TODO list and make a new release ASAP.

dcparker
Path Finder

That would be awesome, thank you!

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...