I'm using Monitoring of Java Virtual Machines with JMX (https://splunkbase.splunk.com/app/668/ ) to send my JMX metrics to Splunk. I am able to get them to come in, and they are formatted as follows:
host=kafka.example.com,jvmDescription="kafka.example.com",mbean_domain=kafka.server,mbean_property_name=BytesInPerSec,mbean_property_type=BrokerTopicMetrics,OneMinuteRate=0.0076934320698407235,EventType=bytes,Count=12681948627,FifteenMinuteRate=124.59768373600586,FiveMinuteRate=8.208111103137483,MeanRate=17771.71328341811
Within Splunk, I currently have the `sourcetype=generic_single_line`. Is there a predefined type for jmx? I've seen references around the web to a `sourcetype=jmx`, but I can't find any such thing in my Splunk installation. Is this a standard type? Is it delivered with one of the Splunk apps? Or do I need to define a sourcetype myself to extract all the keys and values?
I am using Splunk Enterprice 6.3.0. I am using version 2.3 of "Monitoring of Java Virtual Machines with JMX".
Thanks.
↧