HI,
We are looking to monitor Tomcat related logs, and from documentation, we are suggested to install the Splunk Add-on for Java Management Extensions and Splunk Add-on for Tomcat .
But we have already installed Monitoring of Java Virtual Machines with JMX with our environment. Can this solve our need, or do we need to install "Splunk Add-on for Java Management Extensions" specifically?
These are 2 add-ons available for JMX in Splunkbase
Monitoring of Java Virtual Machines with JMX
Splunk Add-on for Java Management Extensions
You need to install Tomcat Add-on for Splunk by downloading the zip file and install it by just uploading it in Install from file option in the manage apps.Then go to the path C:\Program Files\Splunk\etc\apps\Splunk_TA_tomcat\default and copy inputs.confg and paste it in C:\Program Files\Splunk\etc\apps\Splunk_TA_tomcat\local by making just a change i.e. Disable value to False
You don't need the JMX add-on to monitor Tomcat logs.
http://docs.splunk.com/Documentation/AddOns/released/Tomcat/Sourcetypes
You can see in the instructions here that you can skip installing the JMX add-on, and just enable the log monitors.
http://docs.splunk.com/Documentation/AddOns/released/Tomcat/Installationoverview
http://docs.splunk.com/Documentation/AddOns/released/Tomcat/Setup#Configure_file_monitor_inputs_in_i...
If you would like to see JMX data in Splunk, you'll need to either pipe it in from whatever JMX collection tool you are using, or enable the JMX add-on.