Splunk Search

What are the possibilities to achieve Thread Dump & Heap Dump Log Collection?

ramanan
Engager

Hi All,

I need to collect "Thread Dump" and "Heap Dump" of the application into Splunk.  What are all the possibilities to achieve it?

0 Karma

yuanliu
SplunkTrust
SplunkTrust

You don't ask for "all" possibilities because there are too many, albeit enumerable.  The usual way to collect thread dump would be to run kill -3 periodically and just collect JVM logs. (I assume that you really want to collect data at predetermined intervals.)  Then, use Splunk to find them.  Alternatively, you can run jstack and dump output to files, then use forwarder to collect those files.  Alternatively, you can send output to HEC or Splunk API.

To collect heap dump, I assume that you just want histograms, not full object dumps. (The latter is destructive.)  One way to do this is to run jmap periodically and dump output to a file, then use forwarder to collect those files.  Another way is to run those commands then send output to HEC, or Splunk API.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...