Nuxeo Server

Remote Monitoring Through a SSH Tunnel

Updated: September 22, 2017 Page Information Edit on GitHub

At some time, you may need to monitor your server trough your SSH access. We assume you have a direct connection to your remote server host. If you're using a gateway, this works too, you just have to configure the right ports forwarding.

Here is how to monitor your server through a SSH tunnel:

  1. On server host, run jstatd with the privileges of the Nuxeo's user:

    jstatd -J-Djava.security.policy=jstat.permissions
    
  2. On your SSH connection, configure a local “dynamic” application-level port forwarding:

    ssh -D 6767 remote-server-host
    
  3. Run jvisualvm on your local host and in the network options, enable the manual proxy settings and configure a socks proxy:

    localhost:6767
  4. Now in jvisualvm, add a remote host for the remote-server-host. You should get the list of Java processes ran by Nuxeo's user remotely.

  5. Identify Nuxeo's Tomcat and launch a connection.

In the given jstat command line, we reference the Java security configuration file jstat.permissions. Here is its content:

grant codebase "file:${java.home}/../lib/tools.jar" {
    permission java.security.AllPermission;
};
3 days ago manonlumeau NXDOC-1323: Update BDE doc
4 years ago Solen Guitter 6
5 years ago Solen Guitter 3
5 years ago Solen Guitter 4 | Moved page in Admin doc and fixed steps format
5 years ago Solen Guitter 5 | Migrated to Confluence 4.0
5 years ago Stéphane Lacoin 2
5 years ago Stéphane Lacoin 1
History: Created by Stéphane Lacoin