All Apps and Add-ons

Why am i getting JMSRuntime Exception NoClassDefFoundError attempting to connect splunk to MQ via bindings file

stlarsen
New Member

Running Splunk 7.1.1 on a Windows 7 Enterprise VM. Followed instructions for setting up JMS Messaging Module to connect to remote MQ Queue using connection factory. Copied different versions of MQ client jar files (8.0.0.10, 7.5.x.x) to the jms_ta folder and got different errors, but still can't get to the point where it actually tries connecting to the remote MQ Queue Manager. These are the messages I am seeing in the splunkd.log:

07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" Stanza jms://queue/:SplunkQueue : Error connecting : java.lang.NoClassDefFoundError: javax/jms/JMSRuntimeException
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" at com.ibm.mq.jms.MQConnectionFactoryFactory.getObjectInstance(MQConnectionFactoryFactory.java:83)
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" at javax.naming.spi.NamingManager.getObjectInstance(NamingManager.java:321)
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" at com.sun.jndi.fscontext.RefFSContext.lookup(RefFSContext.java:146)
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" at com.sun.jndi.fscontext.FSContext.lookup(FSContext.java:127)
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" at javax.naming.InitialContext.lookup(InitialContext.java:417)
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" at com.splunk.modinput.jms.JMSModularInput$MessageReceiver.connect(Unknown Source)
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" at com.splunk.modinput.jms.JMSModularInput$MessageReceiver.run(Unknown Source)
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" Caused by: java.lang.ClassNotFoundException: javax.jms.JMSRuntimeException
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" at java.net.URLClassLoader.findClass(URLClassLoader.java:381)
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:331)
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" ... 7 more

0 Karma
1 Solution

Damien_Dallimor
Ultra Champion

I'm guessing that the jms provider jars for MQ that you are using are referring to javax.jms.JMSRuntimeException , which is not shipped in the core JMS App. Try using MQ jars pre version 8.

View solution in original post

0 Karma

Damien_Dallimor
Ultra Champion

I'm guessing that the jms provider jars for MQ that you are using are referring to javax.jms.JMSRuntimeException , which is not shipped in the core JMS App. Try using MQ jars pre version 8.

0 Karma

stlarsen
New Member

Thanks Damien. I had tried that before with no success, but based on your response, I completely reinstalled everything, then copied in the MQ v7 jar files and it started right up!

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...