Application server data
Whether building a multi-tier web application or using a traditional client-server design, application servers run the backend software that handles user requests. Today, these are typically deployed as virtual machines on a multi-tenant hypervisor. Application server data may include customer information useful in troubleshooting or application state transitions similar to—but less verbose—than debug output that can provide clues to application crashes, memory leaks, and performance problems. It can also can help correlate and trace temporally separated errors to show how they contribute to a larger problem. Anomalies in the logs can indicate potential failures or compromised attempts.
Application
When your Splunk deployment is ingesting application server data, you can use it to accomplish security and compliance use cases.
Sources
Guidance for onboarding data can be found in the Spunk Documentation, Getting Data In (Splunk Enterprise) or Getting Data In (Splunk Cloud).
Looking for more information on data types? Download the Splunk Essential Guide to Machine Data.