Remote Monitoring Through a SSH Tunnel

Updated: December 19, 2019

This page is scheduled for review and update. Check back soon for updated content!

At some time, you may need to monitor your server trough your SSH access. We assume you have a direct connection to your remote server host. If you're using a gateway, this works too, you just have to configure the right ports forwarding.

Here is how to monitor your server through a SSH tunnel:

  1. On server host, run jstatd with the privileges of the Nuxeo's user:

  2. On your SSH connection, configure a local “dynamic” application-level port forwarding:

    ssh -D 6767 remote-server-host
  3. Run jvisualvm on your local host and in the network options, enable the manual proxy settings and configure a socks proxy:

  4. Now in jvisualvm, add a remote host for the remote-server-host. You should get the list of Java processes ran by Nuxeo's user remotely.

  5. Identify Nuxeo's Tomcat and launch a connection.

In the given jstat command line, we reference the Java security configuration file jstat.permissions. Here is its content:

grant codebase "file:${java.home}/../lib/tools.jar" {

We'd love to hear your thoughts!

All fields required