AppD Archive

how to monitor file access by app

Kenny_Yu
Path Finder

How to see what files a java application is accessing, especially, writing? I figure this is possible, but I am missing it, because appd can detect backend activities such as jms and jdbc. Thanks.

0 Karma

Jean-Baptiste_M
Builder
Hi Kyu
I would do it by defining a custom exit point on the right class/method
making the file read or write. A single exit point (without split) should
be enough and you can collect additional information such as filename as a
snapshot data

https://docs.appdynamics.com/display/PRO42/Configure+Custom+Exit+Points

You would see the icon on the flow map

Or you could go with a Data Collector:

https://docs.appdynamics.com/display/PRO42/Collecting+Application+Data

You could search for a specific filename but only for BTs with a snapshot

So it all depends on what you need.
Best
JB

0 Karma

Kenny_Yu
Path Finder

Hi, JB,

Those are interesting ideas and would work if I had access to the code. The application I am dealing with is a blackbox that writes log/tmp files to locations that are dynamically set and have randomized pathnames. I'll need to grab stacktraces to identify the classname.methodname, but even that won't work if the classes are loaded dynamically from the network via a custom classloader.

Cheers

K

0 Karma

Jean-Baptiste_M
Builder

then lsof is your only remaining friend, isn't it?

0 Karma

Kenny_Yu
Path Finder

JB,

lsof will work - but do I have to log in to the host or can appd help?

Thanks

Kenny

0 Karma

Jean-Baptiste_M
Builder
Hmm,
You can use a custom extension
https://docs.appdynamics.com/display/PRO42/Extensions+and+Custom+Metrics to
automate a script using lsof, but the extension cannot retrieve any list
only counters (number of files for examples)
You can use your scrip to copy the list somewhere.
Or you can use Log Analytics to do that but you need a specific license.
Let me know what you think
JB
0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...