All Apps and Add-ons

Oracle Weblogic App for Splunk: How to deploy the TA configurations to the forwarder residing on the WLS Admin Server?

New Member

Hi All,

We are unable to get the weblogic domains & server details in the "Weblogic App for Splunk" in the splunk applications.
Please advise regarding this.

Steps we have done so far:

Installed splunk (6.2.2-255606) in the linux server, Same server we have installed weblogic server (10.3.6) and created domain as well.Here we are trying to achieve this weblogic applications to integrate with splunk app.

Splunk Home: /oracle/Splunk/splunk
Weblogic Home: /oracle/app/Middleware/wlserver_10.3

1) Deployed add-on file "oracle-weblogic-app-for-splunk_10-beta2.tgz" in the splunk application.
2) Deployed Sideview utils file "sideview_utils.tar" in the splunk application.
3) Updated the required weblogic & admin server details in inputs.conf and, as per the TA installation document. Later we placed the files in the below stated location

$SPLUNK_HOME/etc/deployment-apps/Function1_WebLogicServer_TA/local/inputs.conf &
$SPLUNK_HOME/etc/deployment-apps/Function1_WebLogicServer_TA/bin/ folders.

E.g.: Below lines are modified in the inputs.conf file in our environment, did same for EVERY HOUR & # EVERY DAY

[script://./bin/ /oracle/Splunk/splunk/etc/deployment-apps/Function1_WebLogicServer_TA /oracle/app/Middleware/wlserver_10.3]
disabled = false
index = wls
sourcetype = wls_trash
interval = 300

E.g.: Below lines are modified in the in our environment

export BEA_HOME=/oracle/app/Middleware
export SPLUNK_HOME=/oracle/Splunk/splunk
export DOMAIN_PATH_1=/oracle/app/Middleware/user_projects/domains/soa_domain
export ADMIN_SERVER_1=AdminServer
export ADMIN_PORT_1=8080

Both files are updated as per the TA document "Splunk for Oracle Weblogic Server (v.1.0.1Beta)".
Then moving forward to step 6, documents says that "Once you have completed these configurations, deploy the TA to the forwarder residing on the WLS Admin Server by either Using the Splunk deployment server or copying the TA to the forwarder manually."

Please advise me regarding this deployment, am not clear in this step. Currently I have kept this config file folder "Function1_WebLogicServer_TA" under "$SPLUNK_HOME/etc/deployment-apps/". Please let me know where & how to deploy this files.


0 Karma

New Member

Hello Athish,

While the use of the Splunk Deployment Server is an organized and scalable solution for Splunk deployments, it does not appear that you need one in this case. Try moving the Function1_WebLogicServer_TA to $SPLUNK_HOME/etc/apps (/oracle/Splunk/splunk/etc/apps). When you do, you will also need to edit your inputs.conf to reflect the new location.

0 Karma

New Member

Hi Kevin,

Thanks for your valueable suggestions.
As advised i will move the Function1_WebLogicServer_TA to $SPLUNK_HOME/etc/apps (/oracle/Splunk/splunk/etc/apps) folder in my environment.

Also please let me know, how to deploy after that.
It means (How to get the weblogic logs and managed server logs details in the splunk applications), Please advise if you aware.


0 Karma

New Member

Hello Athish,
The app is pre-configured to forward the logs details and the console info to the indexer. Make sure your path is correct in the inputs.conf. If errors persist follow the troubleshooting document that comes along with the deployment package. You may also need to make sure the weblogic and splunk path is correctly reflected in the shell scripts in the bin folder.


0 Karma
Get Updates on the Splunk Community!

Splunk Education - Fast Start Program!

Welcome to Splunk Education! Splunk training programs are designed to enable you to get started quickly and ...

Five Subtly Different Ways of Adding Manual Instrumentation in Java

You can find the code of this example on GitHub here. Please feel free to star the repository to keep in ...

New Splunk APM Enhancements Help Troubleshoot Your MySQL and NoSQL Databases Faster

Splunk Observability has two new enhancements to make it quicker and easier to troubleshoot slow or frequently ...