Splunk Search

What are the possibilities to achieve Thread Dump & Heap Dump Log Collection?


Hi All,

I need to collect "Thread Dump" and "Heap Dump" of the application into Splunk.  What are all the possibilities to achieve it?

Labels (1)
0 Karma


You don't ask for "all" possibilities because there are too many, albeit enumerable.  The usual way to collect thread dump would be to run kill -3 periodically and just collect JVM logs. (I assume that you really want to collect data at predetermined intervals.)  Then, use Splunk to find them.  Alternatively, you can run jstack and dump output to files, then use forwarder to collect those files.  Alternatively, you can send output to HEC or Splunk API.

To collect heap dump, I assume that you just want histograms, not full object dumps. (The latter is destructive.)  One way to do this is to run jmap periodically and dump output to a file, then use forwarder to collect those files.  Another way is to run those commands then send output to HEC, or Splunk API.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...

Edge Processor Scaling, Energy & Manufacturing Use Cases, and More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Get More Out of Your Security Practice With a SIEM

Get More Out of Your Security Practice With a SIEMWednesday, July 31, 2024  |  11AM PT / 2PM ETREGISTER ...