Splunk Search

What are the possibilities to achieve Thread Dump & Heap Dump Log Collection?

ramanan
Engager

Hi All,

I need to collect "Thread Dump" and "Heap Dump" of the application into Splunk.  What are all the possibilities to achieve it?

0 Karma

yuanliu
SplunkTrust
SplunkTrust

You don't ask for "all" possibilities because there are too many, albeit enumerable.  The usual way to collect thread dump would be to run kill -3 periodically and just collect JVM logs. (I assume that you really want to collect data at predetermined intervals.)  Then, use Splunk to find them.  Alternatively, you can run jstack and dump output to files, then use forwarder to collect those files.  Alternatively, you can send output to HEC or Splunk API.

To collect heap dump, I assume that you just want histograms, not full object dumps. (The latter is destructive.)  One way to do this is to run jmap periodically and dump output to a file, then use forwarder to collect those files.  Another way is to run those commands then send output to HEC, or Splunk API.

0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...