All Apps and Add-ons

Suppressing an write-only attribute in Splunk for JMX

dcparker
Path Finder

Hello,

I am using the Splunk for JMX app to monitor my Cassandra cluster and it's awesome. However, I do get an error in the splunk logs that I would like to get rid of.

Here's what happens: I am monitoring the entire mbean domain using:

<mbean domain="org.apache.cassandra.db" properties="*" dumpAllAttributes="true"/>

However, there is a single attribute in there that seems to be write-only:

01-21-2014 11:14:22.251 -0600 ERROR ExecProcessor - message from "python /opt/splunkforwarder/etc/apps/jmx_ta/bin/jmx.py" Error executing JMX stanza jmx://cassandra : Write-only attribute: CrcCheckChance

My question - is there a way to tell it to exclude that attribute or ignore the error? I could go through and list every property in that domain I suppose, but there are a ton and all of them are useful. The only problem is this error. Any help would be greatly appreciated!

PS - everything works fine even though this error is there, I would just like to get rid of it since it happens every call.

0 Karma
1 Solution

Damien_Dallimor
Ultra Champion

OK , I have released a new version (2.0.4) with this feature. Enjoy !

View solution in original post

Damien_Dallimor
Ultra Champion

OK , I have released a new version (2.0.4) with this feature. Enjoy !

dcparker
Path Finder

awesome, thank you!

0 Karma

Damien_Dallimor
Ultra Champion

dumpAllAttributes doesn't have any filtering capability currently.

I could add some code so that only "readable" attributes are polled when doing a bulk dump, there is a convenient method for this in the JMX API.

I'll put this on the TODO list and make a new release ASAP.

dcparker
Path Finder

That would be awesome, thank you!

0 Karma
Get Updates on the Splunk Community!

Everything Community at .conf24!

You may have seen mention of the .conf Community Zone 'round these parts and found yourself wondering what ...

Index This | I’m short for "configuration file.” What am I?

May 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with a Special ...

New Articles from Academic Learning Partners, Help Expand Lantern’s Use Case Library, ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...