Alerting

How to configure multiple tomcat servers under splunk add-on for Tomcat

sandeepduppalli
Explorer

I have installed splunk add-on for tomcat on search head and indexer and by using Universal Forwarder I am sending my Tomcat logs to SH and indexer. I have configure my Tomcat URL under the setup page of add-on and I am able to parse the logs and extract the fields. It is good till here, now I am having multiple Tomcat servers to send the logs. How do I configure the multiple server URL's under the this setup page.? Is it meant for accepting the single URL?Capture.JPG

Tags (1)
0 Karma

DavidHourani
Super Champion

Hi @sandeepduppalli,

Seems like it might be limited to a single input. You can try one of two things :

1- Replicate the stanza for the input in the configuration and see how it behaves.

2- Replicate the entire application making one app per tomcat server.

Let me know if that helps.

Cheers,

David

Tags (1)
0 Karma

sandeepduppalli
Explorer

Can you please elaborate to get a clear picture? I tried changing under tomcat_server.conf under SPLUNK_HOME/etc/apps/Splunk_TA_tomcat/local/ but the password is encrypted. I don't think I can  change here also.

0 Karma
Get Updates on the Splunk Community!

Why You Can't Miss .conf25: Unleashing the Power of Agentic AI with Splunk & Cisco

The Defining Technology Movement of Our Lifetime The advent of agentic AI is arguably the defining technology ...

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...