I would like to use the JMS Modular Input to receive messages from a remote ActiveMQ JMS Queue. My scenario is this:
I have a splunk environment with 1 search head, 2 indexers, and a Universal Forwarder. I would like to add a Heavy Forwarder to this environment (on the same machine as the UF, if that is possible). The Heavy Forwarder would host the JMS Modular Input.
The only information I have about the JMS source I am connecting to is that it is activeMQ and I know the host, port, user, password and queue name. So this is where I get confused. I'm not sure if I'm supposed to do the JNDI thing or the local instantiation. Of course, I want to do whatever is the easiest and fastest. But I am not familiar with JNDI and also am not sure what would go into the local instantiation. Do I need to set up and run some sort of JNDI service on my host? Or is it as easy as giving the right combination of the info I have to the JMS Modular input UI?
I apologize if my questions seem broad. I am reading up on JNDI but it doesn't seem to be clicking. Any help would be appreciated.
↧