topic Accessing HEC with Java getting error Failed to connect to hecdevsplunk.company.com/11.54.0.234:8088 in Splunk Dev

Accessing HEC with Java getting error Failed to connect to hecdevsplunk.company.com/11.54.0.234:8088

steveIMS — Sun, 07 Jun 2020 18:24:13 GMT

Using Java Class HttpEventCollectorLoggingHandler, with properties file, implementing the HttpEventCollectorErrorHandler.

The Reply; Error Code and Error text from HttpEventCollectorErrorHandler is:

Reply: Failed to connect to hecdevsplunk.company.com/11.54.0.234:8088
ErrorCode: -1
ErrorText: com.google.gson.stream.MalformedJsonException: Use JsonReader.setLenient(true) to accept malformed JSON at line 1 column 9 path $
Failed write of Log Event: Failed to connect to hecdevsplunk.company.com/11.54.0.234:8088
HttpEventCollectorErrorHandler

Any assistance would be appreciated, Thanks Steve.

Re: Accessing HEC with Java getting error Failed to connect to hecdevsplunk.company.com/11.54.0.234:8088

struffieux — Fri, 19 Nov 2021 08:28:30 GMT

Hi,

I have the same error.:

om.splunk.logging.HttpEventCollectorErrorHandler$ServerErrorException: com.google.gson.stream.MalformedJsonException: Use JsonReader.setLenient(true) to accept malformed JSON at line 1 column 7 path $

Something new about it?

Re: Accessing HEC with Java getting error Failed to connect to hecdevsplunk.company.com/11.54.0.234:8088

struffieux — Fri, 19 Nov 2021 10:18:16 GMT

It seems in case of error by send event that HttpEventCollectorSender will instantiate a ServerErrorException:

HttpEventCollectorErrorHandler.error(events, new ServerErrorException(ex.getMessage()));

And ServerErrorException try to parse the message as JSON (!):

public ServerErrorException(String serverReply) { this.reply = serverReply; try { JsonObject json = JsonParser.parseString(serverReply).getAsJsonObject(); this.errorCode = json.get("code").getAsLong(); this.errorText = json.get("text").getAsString(); } catch (Exception var3) { this.errorText = var3.getMessage(); } }

So this error is not the original error.