Ran the : /opt/splunk/include/jre1.8.0_65/bin/keytool -list -v -keystore /opt/splunk/etc/apps/splunk_app_db_connect/certs/default.jks
following error in linux (ubuntu) machine:
keytool error: java.lang.Exception: Keystore file does not exist: /opt/splunk/etc/apps/splunk_app_db_connect/certs/default.jks
java.lang.Exception: Keystore file does not exist: /opt/splunk/etc/apps/splunk_app_db_connect/certs/default.jks
at sun.security.tools.keytool.Main.doCommands(Main.java:742)
at sun.security.tools.keytool.Main.run(Main.java:340)
at sun.security.tools.keytool.Main.main(Main.java:333)
issue1: I reinstalled DBconnect and default.jks did not get generated. As per the documentation it generates an RPC server SSL certificate with a validity period of two years.
issue2: does DBconnect 2 require JDK or JRE java file? when i configure it to use JDK jdk1.8.0_73 i receive the following error
JRE Status: OSError: [Errno 13] Permission denied
it works fine with JRE >jre1.8.0_65.
issue3: On the heavy forwarder the RPC server shows green but gives error while running the DB input as follows:
External search command 'dbxquery' returned error code 1. Script output = " ERROR "Exception at ""/opt/splunk/etc/apps/splunk_app_db_connect/bin/dbxquery.py"", line 138 : No rpc server enabled" "
For issue #3 check out this answer https://answers.splunk.com/answers/332897/splunk-db-connect-2-why-am-i-getting-no-rpc-server-1.html