| Author |
Message
|
| ashokjagatha |
 Posted: Thu Jul 23, 2015 2:47 am Post subject: IIB with SPLUNK |
 |
|
Novice
Joined: 23 Jul 2015
Posts: 13
|
how to get logs from IIB9(message broker) to SPLUNK .
My requirement is to store index logs in SPLUNK .
I tried placing logs via trace node in file directory (IIB and splunk are instaled in one system) its working .
If someone can help me with remote instance of splunk need to be configured so that it collects message flow logs
_________________
AJ MB developer |
|
| Back to top |
|
 |
| smdavies99 |
| Posted: Thu Jul 23, 2015 3:20 am Post subject: |
|
|
Jedi Council
Joined: 10 Feb 2003
Posts: 6076
Location: Somewhere over the Rainbow this side of Never-never land.
|
What sort of logs are you talking about?
Please explain. When you do I am sure that you will recieve a good number of suggestions (including how to play Kerplunk  )
_________________
WMQ User since 1999
MQSI/WBI/WMB/'Thingy' User since 2002
Linux user since 1995
Every time you reinvent the wheel the more square it gets (anon). If in doubt think and investigate before you ask silly questions. |
|
| Back to top |
|
|
| Vitor |
| Posted: Thu Jul 23, 2015 4:59 am Post subject: Re: IIB with SPLUNK |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| ashokjagatha wrote: |
how to get logs from IIB9(message broker) to SPLUNK .
My requirement is to store index logs in SPLUNK . |
I assume you mean SPLUNK. I echo the question of my associate; what do you mean by "index" logs? IIB doesn't produce indexes. Do you mean that you want to record an "index" (audit) of some payload data, based on:
| ashokjagatha wrote: |
| I tried placing logs via trace node in file directory (IIB and splunk are instaled in one system) its working . |
It will but that's a very bad design. Trace nodes are inefficient, shouldn't be used in Production and have the risk that the IIB admin will disable them if he notices they're in use (which he can do with a command and without touching your code). There are any number of better ways to extract data from IIB.
| ashokjagatha wrote: |
| If someone can help me with remote instance of splunk need to be configured so that it collects message flow logs |
How to do remote data collection is described in the documentation that comes with the product, a few pages after how it talks about to local data collection.
You also need to clarify your terms; you talk about index logs and message flow logs, neither of which IIB produce. It doesn't use indexes & produces message flow statistics not logs. The only logs which it produces (and which you can collect with SPLUNK because we do it here) are the error logs.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Thu Jul 23, 2015 5:47 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
Don't forget record and replay.
(also not "logs" that can be read by a "log analyzer") |
|
| Back to top |
|
|
| ashokjagatha |
| Posted: Fri Jul 24, 2015 6:46 am Post subject: |
|
|
Novice
Joined: 23 Jul 2015
Posts: 13
|
I just want to to have my error logs from message flow to SPLUNK.
In SHORT i want to integrate IIB with splunk plz guide me 
http://www.splunk.com/
_________________
AJ MB developer |
|
| Back to top |
|
|
| Vitor |
| Posted: Fri Jul 24, 2015 6:49 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
The SPLUNK people make all the guide you need 
(As I indicate above, we use it here)
If you feel they don't, I'm sure there's a SPLUNK forum you can try. Your question is not, "how do I interrogate IIB with SPLUNK", it's "how do I configure SPLUNK to read a rolling text file".
You'll have the same issues trying to read the MQ error logs with SPLUNK (which I would recommend).
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Fri Jul 24, 2015 7:39 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
I'm having some fun with Elasticsearch/Logstash/Kibana... (for a positive value of "fun")
If I get some time, I'll see if I can throw together some logstash config that will parse MQError logs... it's basic syslog function will already read the IIB logs. But you might want some customization to add fields based on IIB specific content.
Obviously off topic for SPLUNK. |
|
| Back to top |
|
|
|
|
