Skip to main content

 

Splunk Lantern

Application server data

 

Application server data refers to the operational, configuration, and performance information generated, collected, or maintained by the servers that host and run software applications. This data supports the management, monitoring, troubleshooting, and optimization of application server environments, but does not include the business or user data processed by the applications themselves.

Key characteristics of application server data are that it is:

  • Operational focus: Captures details about the functioning and status of the server environment.
  • Supports monitoring and management: Used for health checks, performance tuning, and issue resolution.
  • Infrastructure-related: Pertains to the server, middleware, and hosting environment, rather than end-user or business process data.

This data might include logs, configurations, and metrics.

Application server data typically includes:

  • Server log files: Startup logs, error logs, access logs
  • Performance metrics: CPU/memory usage, thread counts, response times
  • Configuration files: Port settings, connection pools, environment variables
  • Deployment and startup records: Application version, deployment time, status
  • Error and exception reports: Stack traces, exception messages
  • Security and access logs: Login attempts, authentication failures
  • Resource utilization reports: Heap/disk usage, active session counts

You might also be interested in application data.

Before looking at documentation for specific data sources, review the Splunk Docs information on general data ingestion: 

Use cases for Splunk security products