All Apps and Add-ons

Issues after upgrading jms_ta from version 1.3.6 to 1.3.8

rajanala
Path Finder

Had a working system with jms_ta 1.3.6 until the OS updates to patch SSL3 took place.

Current System details:
We now upgrade from jms_ta 1.3.6 to jms_ta 1.3.8
Splunk: 5.0.3 Universal Forwarder
java version "1.7.0_75"
OpenJDK Runtime Environment (rhel-2.5.4.0.el6_6-x86_64 u75-b13)
OpenJDK 64-Bit Server VM (build 24.75-b04, mixed mode)

ISSUE:
We were not able to make jms_ta 1.3.8 work.

Tested the settign with the followign command:
python /opt/splunk/etc/apps/jms_ta/bin/jms.py --scheme
Error: Could not find or load main class com.splunk.modinput.jms.JMSModularInput

splunkd.log shows these errors:
-0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/jms_ta/bin/jms.py" Error executing modular input : Server chose TLSv1, but that protocol version is not enabled or not supported by the client. : java.lang.RuntimeException: Server chose TLSv1, but that protocol version is not enabled or not supported by the client.
-0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/jms_ta/bin/jms.py" at com.splunk.HttpService.send(HttpService.java:370)
-0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/jms_ta/bin/jms.py" at com.splunk.Service.send(Service.java:1268)
-0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/jms_ta/bin/jms.py" Caused by: javax.net.ssl.SSLHandshakeException: Server chose TLSv1, but that protocol version is not enabled or not supported by the client.

Request for help in resolving the issue.

rajanala
Path Finder

Fixed the issue by:
1) Upgrading Splunk Forwarder from 5.X to 6.X.
2) Upgrading jms_ta to 1.3.8

0 Karma

Damien_Dallimor
Ultra Champion

FYI:

Splunk 5 does not support TLSv1.2.
JMS 1.3.8 uses TLSv1.2

0 Karma

rajanala
Path Finder

I would like to download and test with jms_ta 1.3.7 but Splunk defaults to jms_ta 1.3.8 .

0 Karma
Get Updates on the Splunk Community!

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...