Hi, yes, host name is splunkhost. ( should the "set host" be "splunkhost" in TCP Data-Input in Splunk UI) Configuration file: --------------------- Common Agent options --------------------- agent.app.name=Tomcat agent.app.instance=jdk1.7.0_65 agent.userEventTags=key1=value1,key2=value2 ------------------------- Splunk Transport options ------------------------- splunk.transport.internalQueueSize=10000 splunk.transport.impl=com.splunk.javaagent.transport.SplunkTCPTransport splunk.transport.impl=com.splunk.javaagent.transport.SplunkStdOutTransport splunk.transport.tcp.host=splunkhost splunk.transport.tcp.port=5150 splunk.transport.tcp.maxQueueSize=5MB splunk.transport.tcp.dropEventsOnQueueFull=false trace.whitelist=com/vogella trace.blacklist=com/sun,sun/,java/,javax/,com/splunk/javaagent/ trace.methodEntered=true trace.methodExited=true trace.classLoaded=true trace.errors=true periodically dump hprof file(using JMX operation call), read in file & parse, send events to Splunk, delete file trace.hprof=true trace.hprof.tempfile=D:\344235\mydump.hprof trace.hprof.tempfile=/etc/tmp/dump.hprof in seconds trace.hprof.frequency=10 Embedded JMX polling , all other JMX config is in the JMX XML configuration file. trace.jmx=true name of XML files(minus the ".xml" suffix) that should reside in the root of splunkagent.jar trace.jmx.configfiles=jmx trace.jmx.configfiles=goo,foo in seconds trace.jmx.default.frequency=20 trace.jmx.goo.frequency=30 ... View more

Hi, 1) Environment: J2EE web application with Tomcat server, JDK1.7 . Application is running from Eclipse. 2) SetUp Steps: Splunkagent Jar is started with the start of Tomcat server. TCP port is configured as Directed in this link( http://docs.splunk.com/Documentation/Splunk/6.1.4/Data/Monitornetworkports) in the splunk UI. Splunk UI Data Input: (i) TCP Port:5150 (i) Source Type: Manual -TCP raw More Settings: (i) SetHost: Custom Value: PCname Index: Default Splunkagent.properties file configuration (changes) : agent.app.name=Tomcat agent.app.instance=jdk1.7.0_65 splunk.transport.tcp.host=splunkhost splunk.transport.tcp.port=5150 3) No error messages were observed 4) Splunk configuration file: agent.app.name=Tomcat agent.app.instance=jdk1.7.0_65 (i) splunk.transport.tcp.host=splunkhost (i) splunk.transport.tcp.port=5150 trace.whitelist=com/vogella trace.blacklist=com/sun,sun/,java/,javax/,com/splunk/javaagent/ 5) No, i didn't perform any troubleshooting Note: I may have gone wrong in configuring Splunk properties file and Splunk UI settings marked with (i) above I want to see the Method level statistics for those that are whitelisted in the splunk configuration file. Thanks, ... View more