topic DB Connect does not work when enableSplunkdSSL=false in Splunk Search

DB Connect does not work when enableSplunkdSSL=false

yitzarad — Fri, 26 Jul 2013 10:18:20 GMT

Hi.

For some reasons, I turned off SSL for Splunk REST API. Everything is fine, except the Splunk DB Connect app.

jbridge is failing to start, after the SSL change:

DEBUG  Setting up java Environment: app=dbx, cfg_name=java, cfg_stanza=java, java_home=None
DEBUG  JAVA_HOME=C:\Program Files\Java\jre7
INFO   Checking for obsolete java libraries in C:\Program Files\Splunk\etc\apps\dbx\bin\lib
DEBUG  Starting JavaBridgeServer...
DEBUG  Executing (native) CMD C:\Program Files\Java\jre7\bin\java.exe -cp .....
       -Dsplunk.app.ctx=dbx com.splunk.bridge.JavaBridgeServer 1368
INFO   Started JavaBridgeServer PID=3868
DEBUG  win32 handler registered
ERROR  Java process returned error code 1! Error: initializing Splunk context...
       Exception in thread "main" com.splunk.config.SplunkConfigurationException:
       IO Error while reading configuration from Splunkd: javax.net.ssl.SSLException:
       Unrecognized SSL message, plaintext connection?
           at com.splunk.config.rest.RESTAdapter.request(RESTAdapter.java:195)
           at com.splunk.config.rest.RESTAdapter.readConfig(RESTAdapter.java:203)
           ...
           at com.splunk.env.SplunkContext.getConfigStanza(SplunkContext.java:313)
           at com.splunk.env.SplunkContext.initialize(SplunkContext.java:128)
           at com.splunk.bridge.JavaBridgeServer.main(JavaBridgeServer.java:34)
 ...
DEBUG  JavaBridgeServer terminated

Did I miss a config options for dbx app, which sets SSL to false?
If there's no such options, is this case a known issue?
Any suggested work around?

Re: DB Connect does not work when enableSplunkdSSL=false

araitz — Fri, 26 Jul 2013 16:53:21 GMT

I was able to reproduce and opened DBX-195. I will update here when I have more information.

Re: DB Connect does not work when enableSplunkdSSL=false

yitzarad — Fri, 02 Aug 2013 11:00:04 GMT

Hi. do you have any time estimation for this to be solved and officially released?

Re: DB Connect does not work when enableSplunkdSSL=false

lukejadamec — Wed, 07 Aug 2013 00:48:40 GMT

According to the documentation, EnableSplunkdSSL=true is a mandatory configuration setting.

From: http://docs.splunk.com/Documentation/DBX/1.0.11/DeployDBX/Installtheconnector
Configure Splunk DB Connect

"Note: To run DB Connect successfully, splunkd HTTPS must be enabled. In the $SPLUNK_HOME/etc/system/default/server.conf configuration file, enableSplunkdSSL must be set to true:

[sslConfig]

enableSplunkdSSL = true"

Re: DB Connect does not work when enableSplunkdSSL=false

yitzarad — Wed, 11 Sep 2013 17:05:56 GMT

hi.
a new version of dbx (1.1) was released, but this constraint is still alive.

won't this issue be fix sometime? is there any significant rationale for this?