Versions Compared

Old Version 1

changes.mady.by.user Former user

Saved on

compared with

New Version Current

changes.mady.by.user Benjamin Daniels

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

https://splunk1.uits.uconn.edu

(REQUIRES VPN OFF CAMPUS)

...

 

Splunk[1][2][3] is a software to search, monitor and analyze machine-generated data by applications, systems and IT infrastructure at scale via a web-style interface.[4] Splunk captures, indexes and correlates real-time data in a searchable repository from which it can generate graphs, reports, alerts, dashboards and visualizations.[5][6]

 

Expand
titleSplunk Host Alias List - Click here to expand...

 

Aliases for host, you would use these to identify systems in a search.

KFS-PRD

prd1.kfs Equivalents:

host="kfs21.uits.uconn.edu"

host="kfs21.*" 

tag::host="prd1.kfs"

 

prd2.kfs Equivalents:

host="kfs23.uits.uconn.edu"

host="kfs23.*" 

tag::host="prd2.kfs"

 

prd3.kfs Equivalents:

host="kfs25.uits.uconn.edu"

host="kfs25.*" 

tag::host="prd3.kfs"

 

prd4.kfs Equivalents:

host="kfs27.uits.uconn.edu"

host="kfs27.*" 

tag::host="prd4.kfs"

 

RICE-PRD

prd1.kr Equivalents:

host="kfs22.uits.uconn.edu"

host="kfs22.*" 

tag::host="prd1.kr"

 

prd2.kr Equivalents:

host="kfs24.uits.uconn.edu"

host="kfs24.*" 

tag::host="prd2.kr"

 

prd3.kr Equivalents:

host="kfs26.uits.uconn.edu"

host="kfs26.*" 

tag::host="prd3.kr"

 

prd4.kr Equivalents:

host="kfs28.uits.uconn.edu"

host="kfs28.*" 

tag::host="prd4.kr"

 

 

Configuring Logs in Splunk

...

Code Block
#
# Copyright 2007-2009 The Kuali Foundation
#
# Licensed under the Educational Community License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.opensource.org/licenses/ecl2.php
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# DO NOT add comments before the blank line below, or they will disappear.
log4j.rootLogger=INFO, LogFile, StdOut
log4j.appender.StdOut=org.apache.log4j.ConsoleAppender
log4j.appender.StdOut.layout=org.apache.log4j.PatternLayout
log4j.appender.StdOut.layout.ConversionPattern=%d{ISO8601} u:%X{user}/d:%X{docId} %-5p %c{1}: %m <EVENT COMPLETE>%n
log4j.appender.LogFile=org.apache.log4j.RollingFileAppender
log4j.appender.LogFile.File=/srv/uconn_configs/kfs-config/logs/dev/kfs/all.log
log4j.appender.LogFile.layout=org.apache.log4j.PatternLayout
log4j.appender.LogFile.layout.ConversionPattern=%d{ISO8601} [%t] u:%X{user}/d:%X{docId} %-5p %c :: %m <EVENT COMPLETE>%n
log4j.appender.LogFile.MaxFileSize=10000KB
log4j.appender.LogFile.MaxBackupIndex=5
log4j.appender.MemoryLogFile=org.apache.log4j.RollingFileAppender
log4j.appender.MemoryLogFile.File=/srv/uconn_configs/kfs-config/logs/dev/kfs/monitoring/memory.log
log4j.appender.MemoryLogFile.layout=org.apache.log4j.PatternLayout
log4j.appender.MemoryLogFile.layout.ConversionPattern=%d{ISO8601} [%t] u:%X{user}/d:%X{docId} %-5p %c :: %m <EVENT COMPLETE>%n
log4j.appender.MemoryLogFile.MaxFileSize=10000KB
log4j.appender.MemoryLogFile.MaxBackupIndex=5
log4j.logger.org.kuali.kfs.sys.MemoryMonitor=INFO, MemoryLogFile
log4j.logger.p6spy=INFO, LogFile, StdOut
log4j.logger.com.opensymphony=ERROR
log4j.logger.net.sf.jasperreports.engine.xml.JRBoxFactory=ERROR
log4j.logger.org.apache.axis=ERROR
log4j.logger.org.apache.commons.digester.Digester=ERROR
log4j.logger.org.apache.ojb.broker.core.PersistenceBrokerImpl=WARN
log4j.logger.org.apache.ojb.broker.core.proxy.IndirectionHandler=ERROR
log4j.logger.org.apache.ojb.broker.core.proxy=WARN
log4j.logger.org.apache.ojb.broker=ERROR
log4j.logger.org.apache.ws=ERROR
log4j.logger.org.apache.xml=ERROR
log4j.logger.org.displaytag=ERROR
log4j.logger.org.enhydra.jdbc.xapool=FATAL
log4j.logger.org.jasig.cas.client.authentication.AuthenticationFilter=ERROR
log4j.logger.org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter=ERROR
log4j.logger.org.jasig.cas.ticket.registry.support.DefaultTicketRegistryCleaner=WARN
log4j.logger.org.jgroups.protocols=ERROR
log4j.logger.org.kuali.kfs.sys.context.Log4jConfigurer=WARN
log4j.logger.org.kuali.rice.config.HierarchicalConfigParser=ERROR
log4j.logger.org.kuali.rice.core.config.BaseConfig=WARN
log4j.logger.org.kuali.rice.core.config.JAXBConfigImpl=ERROR
log4j.logger.org.kuali.rice.core.config=WARN
log4j.logger.org.kuali.rice.core.resourceloader.BaseResourceLoader=WARN
log4j.logger.org.kuali.rice.kew.util.PerformanceLogger=WARN
log4j.logger.org.kuali.rice.kns.datadictionary.DataDictionaryBuilder=WARN
log4j.logger.org.kuali.rice.kns.util.properties.PropertyHolder=WARN
log4j.logger.org.kuali.rice.kns.util.cache=ERROR
log4j.logger.org.kuali.rice.kns.web.struts.action.KualiAction=ERROR
log4j.logger.org.kuali.rice.ksb.messaging.KSBExporter=WARN
log4j.logger.org.kuali.rice.ksb.messaging.RemotedServiceRegistryImpl=WARN
log4j.logger.org.kuali.rice.ksb.messaging.RemoteResourceServiceLocatorImpl=WARN
log4j.logger.org.kuali.rice.ksb.messaging.RoutingTableDiffCalculator=ERROR
log4j.logger.org.kuali.rice.ksb.messaging.serviceexporters.SOAPServiceExporter=WARN
log4j.logger.org.kuali.rice.ksb.messaging.serviceproxies.MessageSendingTransactionSynchronization=WARN
log4j.logger.org.springframework.beans.factory=ERROR
log4j.logger.org.springframework.context.support.ClassPathXmlApplicationContext=WARN
log4j.logger.uk.ltd.getahead.dwr.impl.DefaultConverterManager=ERROR
log4j.logger.uk.ltd.getahead.dwr=WARN
# Change these to debug KIM Permission/Role checks
#log4j.logger.org.kuali.rice.kim.service.impl.IdentityManagementServiceImpl=DEBUG
#log4j.logger.org.kuali.rice.kim.service.impl.PermissionServiceImpl=DEBUG
#log4j.logger.org.kuali.rice.kim.service.impl.PersonServiceImpl=DEBUG
#log4j.logger.org.kuali.rice.kim.service.impl.ResponsibilityServiceImpl=DEBUG
#log4j.logger.org.kuali.rice.kim.service.impl.RoleManagementServiceImpl=DEBUG
# You *REALLY* don't want to see these in DEBUG mode
log4j.logger.org.kuali.rice.core.resourceloader.ResourceLoaderContainer=INFO
log4j.logger.org.objectweb.jotm=INFO
# Stop all those messages when ingesting workflow XML
log4j.logger.org.kuali.rice.kew.rule.service.impl.RuleServiceImpl=WARN
# Some potentially helpful debugging loggers
#log4j.logger.org.kuali.core.service.impl.XmlObjectSerializerServiceImpl=DEBUG
#log4j.logger.org.kuali.rice.core.ojb.SqlGeneratorSuffixableImpl=DEBUG
#log4j.logger.org.kuali.rice.kns.dao.impl.BusinessObjectDaoOjb=DEBUG
#log4j.logger.org.kuali.rice.kns.dao.impl.DocumentDaoOjb=DEBUG
#log4j.logger.org.kuali.rice.kns.lookup.KualiLookupableHelperServiceImpl=DEBUG
#log4j.logger.org.kuali.rice.kns.service.impl.PostProcessorServiceImpl=DEBUG
#log4j.logger.org.kuali.rice.kns.util.WebUtils=DEBUG
#log4j.logger.org.kuali.rice.kns.web.struts.pojo.PojoFormBase=DEBUG
#log4j.logger.org.springframework.beans.factory.support.AbstractBeanDefinitionReader=DEBUG

RICE

/srv/uconn_configs/rice_config/log4j.properties

Code Block
#
# Copyright 2008-2009 The Kuali Foundation
#
# Licensed under the Educational Community License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.opensource.org/licenses/ecl2.php
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# DO NOT add comments before the blank line below, or they will disappear.
log4j.rootLogger=ERROR, StdOut
log4j.appender.StdOut=org.apache.log4j.ConsoleAppender
log4j.appender.StdOut.layout=org.apache.log4j.PatternLayout
# adding user and doc id as per KFSMI-4055
log4j.appender.StdOut.layout.ConversionPattern=%d{ISO8601} [%t] u:%X{user}/d:%X{docId} %-5p %c - %m <EVENT COMPLETE>%n
log4j.appender.StdOut.Threshold=DEBUG
## Kim services.  At DEBUG, you'll see permission checks. At TRACE, you'll see stack info too.
#log4j.logger.org.kuali.rice.kim.service.impl.IdentityManagementServiceImpl=DEBUG
#log4j.logger.org.kuali.rice.kim.service.impl.RoleManagementServiceImpl=DEBUG
#log4j.logger.org.kuali.rice.kim.service.impl.ResponsibilityServiceImpl=DEBUG
#log4j.logger.org.kuali.rice.core.ojb.SqlGeneratorSuffixableImpl=DEBUG
#log4j.logger.org.kuali.rice.kns.web.struts.action.KualiAction=DEBUG
log4j.logger.org.kuali.rice.core.resourceloader.BaseResourceLoader=WARN
log4j.logger.org.kuali.rice.ksb.messaging.KSBExporter=WARN
log4j.logger.org.kuali.rice.core.config.BaseConfig=INFO
uk.ltd.getahead.dwr=WARN
org.kuali.rice.ksb.messaging.servlet.KSBDispatcherServlet=WARN
log4j.logger.org.kuali.rice.ksb.messaging.RoutingTableDiffCalculator=ERROR
log4j.logger.org.kuali.rice.core.config.ConfigParserImpl=INFO