We are looking to monitor Tomcat related logs, and from documentation, we are suggested to install the Splunk Add-on for Java Management Extensions and Splunk Add-on for Tomcat .
But we have already installed Monitoring of Java Virtual Machines with JMX with our environment. Can this solve our need, or do we need to install "Splunk Add-on for Java Management Extensions" specifically?
These are 2 add-ons available for JMX in Splunkbase
Monitoring of Java Virtual Machines with JMX
Splunk Add-on for Java Management Extensions
You don't need the JMX add-on to monitor Tomcat logs.
You can see in the instructions here that you can skip installing the JMX add-on, and just enable the log monitors.
If you would like to see JMX data in Splunk, you'll need to either pipe it in from whatever JMX collection tool you are using, or enable the JMX add-on.
You need to install Tomcat Add-on for Splunk by downloading the zip file and install it by just uploading it in Install from file option in the manage apps.Then go to the path C:\Program Files\Splunk\etc\apps\SplunkTAtomcat\default and copy inputs.confg and paste it in C:\Program Files\Splunk\etc\apps\SplunkTAtomcat\local by making just a change i.e. Disable value to False