no records found in splunk

tlnarayana — Fri, 30 Dec 2016 06:23:53 GMT

I see this error in my Jenkins log - is this the reason no records found in splunk. show me some light

Dec 30, 2016 11:03:55 AM SEVERE com.splunk.splunkjenkins.utils.LogConsumer run
will resend the message:{raw data{level=INFO, log_source=hudson.model.AsyncPeriodicWork$1 run, message=Started Splunk data monitor}}
Dec 30, 2016 11:03:59 AM WARNING com.splunk.splunkjenkins.utils.LogConsumer run
content length:234
org.apache.http.conn.HttpHostConnectException: Connect to PC93274:8088 [PC93274/10.91.72.77, PC93274/10.91.80.126, PC93274/0:0:0:0:0:0:0:1] failed: Connection refused: connect
at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:158)
at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:353)
at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:380)
at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)
at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:184)
at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:88)
at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)
at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:184)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:71)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:220)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:164)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:139)
at com.splunk.splunkjenkins.utils.LogConsumer.run(LogConsumer.java:84)
Caused by: java.net.ConnectException: Connection refused: connect
at java.net.DualStackPlainSocketImpl.connect0(Native Method)
at java.net.DualStackPlainSocketImpl.socketConnect(Unknown Source)
at java.net.AbstractPlainSocketImpl.doConnect(Unknown Source)
at java.net.AbstractPlainSocketImpl.connectToAddress(Unknown Source)
at java.net.AbstractPlainSocketImpl.connect(Unknown Source)
at java.net.PlainSocketImpl.connect(Unknown Source)
at java.net.SocksSocketImpl.connect(Unknown Source)
at java.net.Socket.connect(Unknown Source)
at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:337)
at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:141)
... 12 more

Dec 30, 2016 11:03:59 AM SEVERE com.splunk.splunkjenkins.utils.LogConsumer run
will resend the message:{raw data{level=INFO, log_source=hudson.model.AsyncPeriodicWork$1 run, message=Finished Splunk data monitor. 0 ms}}
Dec 30, 2016 11:03:59 AM WARNING com.splunk.splunkjenkins.utils.LogConsumer run
content length:227
org.apache.http.conn.HttpHostConnectException: Connect to PC93274:8088 [PC93274/10.91.72.77, PC93274/10.91.80.126, PC93274/0:0:0:0:0:0:0:1] failed: Connection refused: connect
at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:158)
at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:353)
at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:380)
at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)
at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:184)
at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:88)
at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)
at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:184)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:71)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:220)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:164)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:139)
at com.splunk.splunkjenkins.utils.LogConsumer.run(LogConsumer.java:84)
Caused by: java.net.ConnectException: Connection refused: connect
at java.net.DualStackPlainSocketImpl.connect0(Native Method)
at java.net.DualStackPlainSocketImpl.socketConnect(Unknown Source)
at java.net.AbstractPlainSocketImpl.doConnect(Unknown Source)
at java.net.AbstractPlainSocketImpl.connectToAddress(Unknown Source)
at java.net.AbstractPlainSocketImpl.connect(Unknown Source)
at java.net.PlainSocketImpl.connect(Unknown Source)
at java.net.SocksSocketImpl.connect(Unknown Source)
at java.net.Socket.connect(Unknown Source)
at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:337)
at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:141)
... 12 more

Re: no records found in splunk

jkat54 — Fri, 30 Dec 2016 13:59:44 GMT

"failed: Connection refused: connect" usually means there is a firewall blocking the port or the server you're connecting to isnt listening on that port.

You could try 'telnet PC93274 8088' at a terminal to see if you get a "connection refused" error there too.

You could try curl as well.

On the server youre connecting to you can run netstat -an to see if 0.0.0.0 (or the IP of that server) is LISTENING on 8088.

If you have a networking team, you'll probably want to contact them for assistance.

Re: no records found in splunk

tlnarayana — Fri, 30 Dec 2016 14:03:06 GMT

thanks for the reply.
FYI - my Jenkins and splunk installed in my laptop - ie localhost

telnet PC93274 8088 ==> gives no error.

Re: no records found in splunk

tlnarayana — Fri, 30 Dec 2016 14:03:31 GMT

thanks for the reply.
FYI - my Jenkins and splunk installed in my laptop - ie localhost

telnet PC93274 8088 ==> gives no error

Re: no records found in splunk

jkat54 — Fri, 30 Dec 2016 22:34:16 GMT

So is the problem solved?

Re: no records found in splunk

tlnarayana — Sat, 31 Dec 2016 05:59:50 GMT

not yet resolved 😞

Re: no records found in splunk

tlnarayana — Sat, 31 Dec 2016 06:00:11 GMT

not yet resolved

Re: no records found in splunk

jkat54 — Sat, 31 Dec 2016 13:33:40 GMT

Why did you mark your answer as the solution?

Is windows firewall blocking the connection?

Do you have the correct port number?

Can you open the same in a web browser?

Re: no records found in splunk

tlnarayana — Mon, 02 Jan 2017 13:39:09 GMT

I have no access to reply to your comments.

Re: no records found in splunk

tlnarayana — Mon, 02 Jan 2017 13:43:02 GMT

1) I have no access to reply to your comments.
when I click submit button always ask - do you want to open or save add.json from answers.splunk.com

2) not sure how to check firewall blocking !?

3) yes - correct port number is configured as per documentation in Jenkins

4) I can open the same in webbrowser

Re: no records found in splunk

txiao_splunk — Tue, 03 Jan 2017 02:51:04 GMT

try use 127.0.0.1 as hostname which will bypass firewall. If it is still not work, I guess you didn't configure http event collector correctly, To enable it, go to Splunk Settings > Data inputs > HTTP Event Collector.
Then click the Global Settings button in the upper-right corner.
You can configure HTTP Port number and SSL on the Global Settings.

topic Re: no records found in splunk in All Apps and Add-ons

no records found in splunk

I see this error in my Jenkins log - is this the reason no records found in splunk. show me some light

Re: no records found in splunk

Re: no records found in splunk

Re: no records found in splunk

Re: no records found in splunk

Re: no records found in splunk

Re: no records found in splunk

Re: no records found in splunk

Re: no records found in splunk

Re: no records found in splunk

Re: no records found in splunk