Dashboards & Visualizations

Is it possible to securely initiate JMX calls from Splunk dashboards

kfsplunk
Observer

We would like to initiate actions to an Active MQ instance in a Fuse environment via JMX. Is it possible using the workflow actions which support POST and GET or can workflow actions be extended to support JMX calls or maybe via drill-down actions or some other mechanism since workflow actions seem to be restricted to search results?
We would also like to be able to use credentials to authenticate this JMX call. Could we pass the credentials used to log into Splunk or possibly credentials saved in a similar way to the DB connect module in a secure way to the JMX call?
All help highly appreciated.

0 Karma

Damien_Dallimor
Ultra Champion

Is it feasible to install a JMX agent on the Acitve MQ JVM that would support JMX over HTTP ?

I'm thinking of Jolokia so you could make JMX calls via HTTP GET/POST workflow actions.

Another approach might be to write you own custom modular alert that would fire a JMX call in response to a particular alerting condition.

There are many examples of modular alerts already on Splunkbase that you could follow as a developer example.

From your custom modular alert script , you could also access encrypted credentials that the user could have entered in your App's setup screen.

0 Karma
Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...