All Apps and Add-ons

Java Management Extensions Add-on: Installation resulted in errors from data inputs on indexing tier

wryanthomas
Communicator

After installing this add-on on Splunk Cloud (clustered indexing and search head tiers), the data input on the indexing tier was throwing errors like the following:

Search peer idx-i-010c268432edd8af5.REDACTED.splunkcloud.com has the following message: Unable to initialize modular input "jmx" defined inside the app "Splunk_TA_jmx": Introspecting scheme=jmx: script running failed (exited with code 1). 6/20/2019, 8:27:17 PM 
0 Karma
1 Solution

wryanthomas
Communicator

Splunk Support reported that after install the "input was trying to run on introspection".

Upshot: After installing add-on, Splunk Support may need to disable the input.

NOTE: It took quite a while to get through this. I reported the errors, and they couldn't seem to find the offending data inputs at first. (?) This is why I'm sharing here ... to help whoever else experiences this get through it faster.

View solution in original post

0 Karma

wryanthomas
Communicator

Splunk Support reported that after install the "input was trying to run on introspection".

Upshot: After installing add-on, Splunk Support may need to disable the input.

NOTE: It took quite a while to get through this. I reported the errors, and they couldn't seem to find the offending data inputs at first. (?) This is why I'm sharing here ... to help whoever else experiences this get through it faster.

View solution in original post

0 Karma

kevansrbfcu
Loves-to-Learn Lots

So what exactly was the fix for this? I have the same error using Splunk Add-on for Java Management Extensions?

0 Karma

wryanthomas
Communicator

Splunk support told me they couldn’t suppress the errors, so I submitted an enhancement request.

Sorry. I wish I had a better answer.

0 Karma

kevansrbfcu
Loves-to-Learn Lots

Did the addon actually work? I am not getting data since Nov 4th. And no changes were made.

0 Karma

amitm05
Builder

Looks like your intent is to share this information with the community. I propose you mention the problem in your question and then put the solution in answer and accept it. Or else for the users searching on this will only see this one as unanswered and might not even look.
Thanks !

.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!