All Apps and Add-ons

Splunk DB Connect 2: Why am I getting "Exception encountered for entity-name = mylookup and type = lookup java.lang.OutOfMemoryError: Java heap space"?

dougmartin
Path Finder

Splunk DB Connect 2 is proving very difficult to get up and running:

2016-02-01 21:05:45 ERROR DBX2Proxy:52 - Exception encountered for entity-name = mylookup and type = lookup
java.lang.OutOfMemoryError: Java heap space
    at com.sun.crypto.provider.CipherCore.update(CipherCore.java:750)
    at com.sun.crypto.provider.AESCipher.engineUpdate(AESCipher.java:400)
    at javax.crypto.Cipher.update(Cipher.java:1945)
    at sun.security.ssl.CipherBox.decrypt(CipherBox.java:469)
    at sun.security.ssl.InputRecord.decrypt(InputRecord.java:172)
    at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1015)
    at sun.security.ssl.SSLSocketImpl.readDataRecord(SSLSocketImpl.java:930)
    at sun.security.ssl.AppInputStream.read(AppInputStream.java:105)
    at com.mysql.jdbc.MysqlIO.readFully(MysqlIO.java:2954)
    at com.mysql.jdbc.MysqlIO.nextRowFast(MysqlIO.java:2159)
    at com.mysql.jdbc.MysqlIO.nextRow(MysqlIO.java:1964)
    at com.mysql.jdbc.MysqlIO.readSingleRowSet(MysqlIO.java:3316)
    at com.mysql.jdbc.MysqlIO.getResultSet(MysqlIO.java:463)
    at com.mysql.jdbc.MysqlIO.readResultsForQueryOrUpdate(MysqlIO.java:3040)
    at com.mysql.jdbc.MysqlIO.readAllResults(MysqlIO.java:2288)
    at com.mysql.jdbc.MysqlIO.sqlQueryDirect(MysqlIO.java:2681)
    at com.mysql.jdbc.ConnectionImpl.execSQL(ConnectionImpl.java:2551)
    at com.mysql.jdbc.PreparedStatement.executeInternal(PreparedStatement.java:1861)
    at com.mysql.jdbc.PreparedStatement.executeQuery(PreparedStatement.java:1962)
    at org.apache.commons.dbcp2.DelegatingPreparedStatement.executeQuery(DelegatingPreparedStatement.java:83)
    at org.apache.commons.dbcp2.DelegatingPreparedStatement.executeQuery(DelegatingPreparedStatement.java:83)
    at com.splunk.dbx2.DBX2LookupJDBC.load(DBX2LookupJDBC.java:300)
    at com.splunk.dbx2.DBX2Proxy.loadLookups(DBX2Proxy.java:330)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:497)
    at com.splunk.dbx2.ServiceResponder.respond(ServiceResponder.java:422)
    at org.apache.avro.ipc.Responder.respond(Responder.java:151)
    at org.apache.avro.ipc.Responder.respond(Responder.java:99)
    at org.apache.avro.ipc.ResponderServlet.doPost(ResponderServlet.java:48)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:707)
0 Karma

s2_splunk
Splunk Employee
Splunk Employee

Looks like you are running out of memory when trying to execute your query. How much data are you expecting back?
You can try increasing your heap in etc//apps//dbx//default//java.conf by adjusting the default from -Xmx256m (256MB) to a higher value.

0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...