I can see soo many errors in splunkd.log. I am not understanding these. Could someone please guide?
12-15-2016 07:15:37.574 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" ERROR:kafka.client:No leader for topic tesco-usage-demo partition 0
12-15-2016 07:15:37.576 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" ERROR:kafka.client:No leader for topic jsontest partition 0
12-15-2016 07:15:37.576 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" ERROR:kafka.client:No leader for topic tesco-usage-demo partition 0
12-15-2016 07:15:37.578 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" ERROR:kafka.client:No leader for topic jsontest partition 0
12-15-2016 07:15:37.578 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" ERROR:kafka.client:No leader for topic tesco-usage-demo partition 0
12-15-2016 07:15:37.580 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" ERROR:kafka.client:No leader for topic jsontest partition 0
12-15-2016 07:15:37.580 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" ERROR:kafka.client:No leader for topic tesco-usage-demo partition 0
12-15-2016 07:15:37.580 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" ERROR:kafka.client:No leader for topic tesco-usage-demo partition 0
12-15-2016 07:15:39.573 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" ERROR:kafka.conn:Unable to connect to kafka broker at 10.109.136.210:9092
12-15-2016 07:15:39.573 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" Traceback (most recent call last):
12-15-2016 07:15:39.573 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" File "/opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka/conn.py", line 220, in reinit
12-15-2016 07:15:39.573 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" self._sock = socket.create_connection((self.host, self.port), self.timeout)
12-15-2016 07:15:39.573 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" File "/opt/applocal/asts/vendor/splunk/forwarder/lib/python2.7/socket.py", line 571, in create_connection
12-15-2016 07:15:39.573 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" raise err
12-15-2016 07:15:39.573 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" error: [Errno 111] Connection refused
12-15-2016 07:15:39.573 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" ERROR:kafka.client:Error sending request [1] to server 10.109.136.210:9092, trying next server
12-15-2016 07:15:39.573 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" Traceback (most recent call last):
12-15-2016 07:15:39.573 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" File "/opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka/client.py", line 136, in _send_broker_unaware_request
12-15-2016 07:15:39.573 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" conn = self._get_conn(host, port)
12-15-2016 07:15:39.573 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" File "/opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka/client.py", line 59, in _get_conn
12-15-2016 07:15:39.573 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" timeout=self.timeout
12-15-2016 07:15:39.573 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" File "/opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka/conn.py", line 64, in __init__
12-15-2016 07:15:39.573 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" self.reinit()
12-15-2016 07:15:39.573 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" File "/opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka/conn.py", line 223, in reinit
12-15-2016 07:15:39.573 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" self._raise_connection_error()
12-15-2016 07:15:39.573 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" File "/opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka/conn.py", line 82, in _raise_connection_error
12-15-2016 07:15:39.573 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" raise ConnectionError("Kafka @ {0}:{1} went away".format(self.host, self.port))
12-15-2016 07:15:39.573 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" ConnectionError: Kafka @ xx.xxx.xxx.xxx:9092 went away
12-15-2016 07:15:39.575 -0500 ERROR ExecProcessor - message from "python /opt/applocal/asts/vendor/splunk/forwarder/etc/apps/Splunk_TA_kafka/bin/kafka_mod.py" ERROR:kafka.client:No leader for topic jsontest partition 0
@
It looks as if your main error is a connection to Kafka broker error:
ERROR:kafka.conn:Unable to connect to kafka broker at 10.109.136.210:9092
It looks as if your main error is a connection to Kafka broker error:
ERROR:kafka.conn:Unable to connect to kafka broker at 10.109.136.210:9092
Ohhh...Let me try to resolve it first then..Thankyou for the info...
Also it would be great if you could help me on thsi issue as well 😞
https://answers.splunk.com/answers/482063/splunk-add-on-for-kafka-jmxlog-how-to-resolve-jmx.html