All Apps and Add-ons

JMS Messaging Modular Input: Why is nothing happening with my current inputs.conf configuration?

plarkin01
Explorer

I have the following configuration in the inputs.conf file, but nothing seems to be happening. I loaded up the bin folder with all the jars that are needed, but there is no logging to the $SPLUNK_HOME/var/log/splunk/splunkd.log. I am just kind of wondering how we are supposed to know if a connection was made or if errors are occurring. Thanks.

[jms://topic/EventTopic]
init_mode = jndi
jms_connection_factory_name = RemoteConnectionFactory
jndi_initialcontext_factory = org.jboss.naming.remote.client.InitialContextFactory
jndi_provider_url = remote://remote.testing:4447
durable = false
sourcetype = syslog
0 Karma

Damien_Dallimor
Ultra Champion

Any errors can be searched with : index=_internal ExecProcessor error jms.py

0 Karma

plarkin01
Explorer

I was able to do that search as well as look at the logs but the issue is nothing is being written. I know the values are correct and when I enter values that I know to be wrong I still do not get any errors. One would assume that if the JMS cannot connect to the topic an error would appear.

0 Karma

Damien_Dallimor
Ultra Champion

Perhaps you have a more systemic error , work through the troubleshooting steps in the docs : https://splunkbase.splunk.com/app/1317/#/documentation

0 Karma

plarkin01
Explorer

That could be the case. If I go through Splunk -> Settings -> Data Inputs -> JMS -> New is it supposed to add something to the input.conf? Currently the only way this is written to is if I open it up and manually add the configuration to it. Thanks .

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...