Hello,
I have a few servers with UniversalForwarder installed, and Splunk4JMX app on them. I have two servers that appear to have the forwarders setup the same, however;
One server Splunk4JMX works great and jmx data gets sent to the indexers
The other server nothing is sent over(no errors in the Splunk4JMX\log folder either). The only way I can get data to splunk indexers is by manually running:
C:\Program Files\SplunkUniversalForwarder\bin>splunk cmd "C:\Program Files\SplunkUniversalForwarder\etc\apps\SPLUNK4JMX\bin\poll_jmx.bat" config.xml
Both servers Spunk4JMX inputs.conf file is the same:
[script://./bin/poll_jmx.sh config.xml]
interval = 60
sourcetype = jmx
index = jmx
disabled = 1
[script://$SPLUNK_HOME\etc\apps\SPLUNK4JMX\bin\poll_jmx.bat config.xml ]
interval = 60
index = jmx
disabled = 0
sourcetype = jmx
[monitor://$SPLUNK_HOME/etc/apps/SPLUNK4JMX/logs]
disabled = false
followTail = 0
index = jmx
sourcetype = jmx_errors
Both servers config.xml is basically the same, except different server values.
According to the README file, Splunk4JMX is version 1.6
**Question**
Is there another setting I am missing to check between these two servers? I assume that since I can manually run it on the broken server, it is not a port/network issue between the server and the indexer. A permissions issue with the user that splunk was installed on maybe?
↧