All Apps and Add-ons

Splunk DB Connect: How to resolve when RPC Service is down when initially setting up the add-on?

dbcase
Motivator

Hi,

I'm attempting (badly) to get the Splunk DB Connect add-on working. Here is what I've done so far:

Installed the heavy forwarder on the same host as the Oracle DB
Configured it to talk to the Splunk Cloud server
Installed Java JDK 8. Also tried JRE 1.8
Configured the settings

What happens is JRE comes up but the RPC Service is down. What am I missing?

1 Solution

dbcase
Motivator

Here is the log entry in the dbx2.log that just keeps repeating

2017-01-20T12:02:32-0600 [CRITICAL] [rpcstart.py], line 381: action=rpc_server_has_been_abnormally_terminated error=Error: Could not find or load main class com.splunk.dbx2.rpc.RPCServer
Traceback (most recent call last):
  File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/rpcstart.py", line 379, in <module>
    _start_rpc_server(sys.stdin.read())
  File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/rpcstart.py", line 363, in _start_rpc_server
    run(configs)
  File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/rpcstart.py", line 260, in run
    raise RpcServerStartupException(stderr.split('\n')[0])
RpcServerStartupException: Error: Could not find or load main class com.splunk.dbx2.rpc.RPCServer
2017-01-20T12:02:47-0600 [INFO] [rpcstart.py], line 366: action=run_rpc_start rpc_start_pid=5665 args=['/opt/splunk/etc/apps/splunk_app_db_connect/bin/rpcstart.py']
2017-01-20T12:02:47-0600 [INFO] [rpcstart.py], line 125: action=start_to_run_rpc_server rpc_start_pid=5665
2017-01-20T12:02:47-0600 [INFO] [rpcstart.py], line 198: action=starting_up_rpc_server_with_command command="[u'/usr/java/jdk1.8.0_121/bin/java', u'-XX:+UseConcMarkSweepGC', '-classpath', '/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc6dms.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/simplefan.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc5_g.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc5dms_g.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc6dms_g.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc6.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc5.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc5dms.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc6_g.jar', '-DSPLUNK_HOME=/opt/splunk', 'com.splunk.dbx2.rpc.RPCServer', u'127.0.0.1:9998']"
2017-01-20T12:02:47-0600 [INFO] [rpcstart.py], line 243: action=rpc_server_process_is_launched rpc_start_pid=5665 rpc_server_pid=5715
2017-01-20T12:02:47-0600 [INFO] [rpcstart.py], line 259: action=stderr_from_terminated_rpc_server rpc_start_pid=5665 rpc_server_pid=5715 stderr=Error: Could not find or load main class com.splunk.dbx2.rpc.RPCServer

2017-01-20T12:02:47-0600 [CRITICAL] [rpcstart.py], line 381: action=rpc_server_has_been_abnormally_terminated error=Error: Could not find or load main class com.splunk.dbx2.rpc.RPCServer
Traceback (most recent call last):
  File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/rpcstart.py", line 379, in <module>
    _start_rpc_server(sys.stdin.read())
  File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/rpcstart.py", line 363, in _start_rpc_server
    run(configs)
  File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/rpcstart.py", line 260, in run
    raise RpcServerStartupException(stderr.split('\n')[0])
RpcServerStartupException: Error: Could not find or load main class com.splunk.dbx2.rpc.RPCServer
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...