Tomcat Monitoring without jmxremote

[dirtydriver]

Dear All!

I started to work in new company and one of my job is to solve the tomcat instance monitoring , but the problem is the jmxremote option is disabled because it is security issue , so my question is can I monitor the tomcat instance through the zabbix-agent ?

[MaxM]

You could easily use twiddle with a shell script to connect locally. I'm not sure what security benefit this will really get you in comparison to proper firewall usage and appropriate permissions using SELinux so that only the zabbix java gateway can connect.

[dixm]

tomcat monitoring

tomcat 7 has jmxproxy built in -
agent adds
UserParameter=jmxproxy_parser.sh[*],/etc/zabbix/externalscripts/jmxproxy_parser.sh push.all $1 $2

which calls teh code from
John Allen ([email protected])

you need a user and password with profile manager-jmx in the tomcat-users.xml

 curl -u user:password [url]http://localhost:8080/manager/jmxproxy/?qry=[/url]

will get you going.

[mushero]

We have a full automatic no-Java script that does this - you put the JMX key in the item argument and it calls it - simple config on the host for the JMX port, plus user/pw (as always secured locally for read/only use on 127.0.0.1 only).

Happy to share details as we think it's by far the easiest, fastest, low overhead way to do JMX; far better than the Zabbix solution and scales well. We've used it on hundreds of systems for many years with zero problems.

Only complex part is for several JVMs on a host, as we'll see up to 10+ for some customers; we can do it via port in argument, but are testing auto discovery LLD for this.

Send me a msg /email for info, code, etc.

Steve