All Apps and Add-ons

JMS Messaging Modular Input: Why am I receiving "ERROR Regex - Failed in pcre_exec" errors after upgrading the Splunk forwarder?

skuma30
New Member

HI,
I'm receiving bunch of errors in the splunkd.log referring to JMS Messaging Modular Input (jms_ta) but I updated the add-on but some reason the jms_ta has stopped polling the logs from the queue which we are supposed to get in the old add-on. So I degraded the add-on to the old version.
ex errors:-

04-20-2017 10:01:58.488 -0500 ERROR Regex - Failed in pcre_exec: Error PCRE_ERROR_MATCHLIMIT for regex: (?im).*
04-20-2017 10:01:58.957 -0500 ERROR Regex - Failed in pcre_exec: Error PCRE_ERROR_MATCHLIMIT for regex: (?im).*
04-20-2017 10:01:59.733 -0500 ERROR Regex - Failed in pcre_exec: Error PCRE_ERROR_MATCHLIMIT for regex: (?im).*
04-20-2017 10:02:00.179 -0500 ERROR Regex - Failed in pcre_exec: Error PCRE_ERROR_MATCHLIMIT for regex: (?im).*

Can you please help me

0 Karma

skuma30
New Member

@Damien Dallimore please find the below conf files in my system:-
inputs:-
[tcp-ssl://6514]
connection_host = dns
index = network
sourcetype = cisco_udp
disabled = 0
Props:-
[mq]
TRUNCATE=0

[log4j]
TRUNCATE=0

And I dont have any transforms file.
Please review and find me a solution for this.

0 Karma

Damien_Dallimor
Ultra Champion

Can you throughly describe you setup and confguration ? props.conf , transforms.conf , inputs.conf etc.....

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...