All Apps and Add-ons

Splunk DB Connect 2: Why am I getting "No rpc server enabled" trying to read a MySQL query?

lcblucas
Explorer

Hi all,

I updated my DB Connect yesterday and there are problems reading a MySQL query. I have the error below:

/opt/splunk/etc/apps/splunk_app_db_connect/bin/dbxquery.py"", line 123 : No rpc server enabled" "

The RPC Service is UP after correct the JRE path.

Can anybody help me, please?

Thanks!

1 Solution

vprisiajni_splu
Splunk Employee
Splunk Employee

Can you check the following path and verify what the disabled value for this stanza is set to?

$SPLUNK_HOME/etc/users/admin/splunk_app_db_connect/local/inputs.conf

[rpcstart://default]

This has been found set to 1 after an upgrade and has been overriding the local app config. Changing it to 0 or deleting the file entirely should resolve the issue (after a reboot).

View solution in original post

vprisiajni_splu
Splunk Employee
Splunk Employee

Can you check the following path and verify what the disabled value for this stanza is set to?

$SPLUNK_HOME/etc/users/admin/splunk_app_db_connect/local/inputs.conf

[rpcstart://default]

This has been found set to 1 after an upgrade and has been overriding the local app config. Changing it to 0 or deleting the file entirely should resolve the issue (after a reboot).

drsharp
Explorer

Found setting disabled=1, changed to 0 and restarted.
Works now.
Thank You

0 Karma

vprisiajni_splu
Splunk Employee
Splunk Employee

Great! Please upvote for visibility for other users with the same issue!

0 Karma

drsharp
Explorer

Same here;

This am DB Connect v2 to MS SQL worked.
Upgraded DB Connect V2, and CIM.
Restarted Splunk.

DBconnect v2 to MS SQL 'validate' works. "Query" page has complete set of tables to select in "Simple Query mode".
Find on previously listed table fails with :
""/opt/splunk/etc/apps/splunk_app_db_connect/bin/dbxquery.py"", line 123 : No rpc server enabled" "

Green RPC status.

Verified with tcpdump to port 1433, 'validate' shows sql network traffic versus 'simple query" NO port 1433 traffic.

Thank you

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Which DB Connect app are you using?

---
If this reply helps you, Karma would be appreciated.
0 Karma

lcblucas
Explorer

Splunk DB Connect V2

0 Karma

tkomatsubara_sp
Splunk Employee
Splunk Employee
0 Karma

lcblucas
Explorer

Splunk DB Connect V2.

Below any error that I see on splunk log:

12/08/2015 11:53:18 [ERROR] [init.py] No rpc server enabled
Traceback (most recent call last):
File "/opt/splunk/lib/python2.7/site-packages/splunk/rest/init.py", line 185, in dispatch
methodOutput = method()
File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/dbquery.py", line 57, in handle_GET
self.dbx2 = rpc_service_channel(self.userName, self.sessionKey, host=self.host, verified=False, use_raw_handler=True)
File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/rpcutils.py", line 30, in rpc_service_channel
rpc = get_local_rpc(user, sessionKey, use_raw_handler=use_raw_handler)
File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/rpcutils.py", line 50, in get_local_rpc
raise Exception("No rpc server enabled")
Exception: No rpc server enabled


12/08/2015 12:01:28 [ERROR] [search_command.py] Traceback (most recent call last):
File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/splunk_sdk-1.3.1.a-py2.7.egg/splunklib/searchcommands/search_command.py", line 316, in process
self._execute(operation, reader, writer)
File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/splunk_sdk-1.3.1.a-py2.7.egg/splunklib/searchcommands/generating_command.py", line 79, in _execute
for record in operation():
File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/dbxquery.py", line 123, in generate
raise Exception(content)
Exception: No rpc server enabled


2015-12-08 11:45:00 ERROR ServiceSocket:107 - An unknown error occurs, the exception class name is java.lang.NullPointerException.
java.lang.NullPointerException
at java.util.StringTokenizer.(Unknown Source)
at java.util.StringTokenizer.(Unknown Source)
at com.splunk.dbx2.CachedIterator.next(CachedIterator.java:129)
at com.splunk.dbx2.CachedIterator.next(CachedIterator.java:20)
at com.splunk.dbx2.ws.ServiceSocket.onWebSocketBinary(ServiceSocket.java:95)
at org.eclipse.jetty.websocket.common.events.JettyListenerEventDriver.onBinaryMessage(JettyListenerEventDriver.java:64)
at org.eclipse.jetty.websocket.common.message.SimpleBinaryMessage.messageComplete(SimpleBinaryMessage.java:68)
at org.eclipse.jetty.websocket.common.events.AbstractEventDriver.appendMessage(AbstractEventDriver.java:64)
at org.eclipse.jetty.websocket.common.events.JettyListenerEventDriver.onBinaryFrame(JettyListenerEventDriver.java:58)
at org.eclipse.jetty.websocket.common.events.AbstractEventDriver.incomingFrame(AbstractEventDriver.java:155)
at org.eclipse.jetty.websocket.common.WebSocketSession.incomingFrame(WebSocketSession.java:309)
at org.eclipse.jetty.websocket.common.extensions.ExtensionStack.incomingFrame(ExtensionStack.java:214)
at org.eclipse.jetty.websocket.common.Parser.notifyFrame(Parser.java:220)
at org.eclipse.jetty.websocket.common.Parser.parse(Parser.java:258)
at org.eclipse.jetty.websocket.common.io.AbstractWebSocketConnection.readParse(AbstractWebSocketConnection.java:613)
at org.eclipse.jetty.websocket.common.io.AbstractWebSocketConnection.onFillable(AbstractWebSocketConnection.java:468)
at org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:540)
at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:620)
at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:540)
at java.lang.Thread.run(Unknown Source)

Thanks for help!

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...