Java birdge server not running in splunk Db connect

[anshu2812]

Hi,

Getting error in Splunk DB connect. Java bridge server is not running and I see the following error in jbridge.log, can anyone please help me in understanding what is wrong? I already restarted server, splunk services and deleted the persistent storage folder for dbx but nothing seems to work -

2013-02-24 19:07:54,306 DEBUG Error waiting for process: Java process returned error code 1! Error: Initializing Splunk context... Environment: SplunkEnvironment{SPLUNK_HOME=E:\Apps\Splunk,SPLUNK_DB=E:\Apps\Splunk\var\lib\splunk} Configuring Log4j... Exception in thread "main" com.splunk.env.SplunkEnvironmentException: Error running InitializationTask com.splunk.dbx.sql.factory.DatabaseFactoryInitializer: com.splunk.config.crypt.SplunkEncryptionException: Error decrypting configuration value: javax.crypto.BadPaddingException: Given final block not properly padded at com.splunk.env.SplunkContext.doStartup(SplunkContext.java:253) at com.splunk.env.SplunkContext.initialize(SplunkContext.java:132) at com.splunk.bridge.JavaBridgeServer.main(JavaBridgeServer.java:34) Caused by: com.splunk.config.crypt.SplunkEncryptionException: Error decrypting configuration value: javax.crypto.BadPaddingException: Given final block not properly padded at com.splunk.config.crypt.Crypt.decrypt(Crypt.java:85) at com.splunk.config.SplunkConfig.decryptValue(SplunkConfig.java:142) at com.splunk.dbx.sql.Database.(Database.java:75) at com.splunk.dbx.sql.factory.DefaultDatabaseFactory.loadDatabase(DefaultDatabaseFactory.java:62) at com.splunk.dbx.sql.factory.PersistentDatabaseFactory.preloadDatabases(PersistentDatabaseFactory.java:100) at com.splunk.dbx.sql.factory.PersistentDatabaseFactory.(PersistentDatabaseFactory.java:38) at com.splunk.dbx.sql.factory.PooledConnectionFactory.(PooledConnectionFactory.java:52) at com.splunk.dbx.sql.Database.initializeFactory(Database.java:765) at com.splunk.dbx.sql.Database.getFactory(Database.java:749) at com.splunk.dbx.sql.factory.DatabaseFactoryInitializer.initialize(DatabaseFactoryInitializer.java:17) at com.splunk.env.SplunkContext.doStartup(SplunkContext.java:251) ... 2 more Caused by: javax.crypto.BadPaddingException: Given final block not properly padded at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:811) at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:676) at com.sun.crypto.provider.AESCipher.engineDoFinal(AESCipher.java:313) at javax.crypto.Cipher.doFinal(Cipher.java:2087) at com.splunk.config.crypt.Crypt.decrypt(Crypt.java:82) ... 12 more
2013-02-24 19:07:54,306 DEBUG JavaBridgeServer terminated

Regards
Anshu

[Dan]

What did you do to lead up to this error? Clean install? Did you happen to reinstall Splunk, or copy configs over leading up to this?

[ziegfried]

The error indicates that DB Connect has troubles decrypting some passwords stored in your configured databases (database.conf). The easiest way to repair this, is to edit the config and replace the encrypted passwords with the original (cleartext) ones. DB Connect will automatically encrypt them again, once the database is loaded.