Splunk Search

What are the possibilities to achieve Thread Dump & Heap Dump Log Collection?

ramanan
Engager

Hi All,

I need to collect "Thread Dump" and "Heap Dump" of the application into Splunk.  What are all the possibilities to achieve it?

0 Karma

yuanliu
SplunkTrust
SplunkTrust

You don't ask for "all" possibilities because there are too many, albeit enumerable.  The usual way to collect thread dump would be to run kill -3 periodically and just collect JVM logs. (I assume that you really want to collect data at predetermined intervals.)  Then, use Splunk to find them.  Alternatively, you can run jstack and dump output to files, then use forwarder to collect those files.  Alternatively, you can send output to HEC or Splunk API.

To collect heap dump, I assume that you just want histograms, not full object dumps. (The latter is destructive.)  One way to do this is to run jmap periodically and dump output to a file, then use forwarder to collect those files.  Another way is to run those commands then send output to HEC, or Splunk API.

0 Karma
Get Updates on the Splunk Community!

.conf25 Registration is OPEN!

Ready. Set. Splunk! Your favorite Splunk user event is back and better than ever. Get ready for more technical ...

Detecting Cross-Channel Fraud with Splunk

This article is the final installment in our three-part series exploring fraud detection techniques using ...

Splunk at Cisco Live 2025: Learning, Innovation, and a Little Bit of Mr. Brightside

Pack your bags (and maybe your dancing shoes)—Cisco Live is heading to San Diego, June 8–12, 2025, and Splunk ...