Our Java-program talks to IBM MQ using IBM-provided com.ibm.mq.allclient
JAR. As documented by IBM, log-messages generated from within the JAR are written out into mqjms.log
in the current directory.
The above link explains, how the location -- and/or the filename -- can be changed, but that's all the flexibility there is documented...
Our own code uses log4j with appenders configured for both local files and for the corporate Splunk -- using Splunk's own JARs.
Is it possible to configure IBM MQ client JAR to feed log-entries directly into Splunk as well? Splunk document, how to feed their server from several Java logging frameworks -- is IBM MQ using any of them? Can it be made to?
Update: I'd rather not feed Splunk by way of printing -- be it into a file watched by Splunk Forwarding Agent -- or other means. Because the printed log-entry loses some information. And because multi-line entries (such as those with Java-exceptions) will generate a logging event for each line.