Security

Errors trying to set up Splunk DB Connect 1 on OSX?

Edmondi
Explorer

I have a clean install of OSX 10.10.3 and necessary apps, jre & jdk, on it. Then I installed splunk enterprise.
After installing db connect v1 and trying to set it up i get the following error from splunkd.log:

04-30-2015 02:54:57.048 +0200 ERROR AdminManagerExternal - Stack trace from python handler:\nTraceback (most recent call last):\n  File "/Applications/Splunk/lib/python2.7/site-packages/splunk/admin.py", line 70, in init\n    hand.execute(info)\n  File "/Applications/Splunk/lib/python2.7/site-packages/splunk/admin.py", line 527, in execute\n    if self.requestedAction == ACTION_LIST:     self.handleList(confInfo)\n  File "/Applications/Splunk/etc/apps/dbx/bin/spp/config.py", line 327, in handleList\n    self.process_list(output)\n  File "/Applications/Splunk/etc/apps/dbx/bin/rest_handler_dbx_setup.py", line 32, in process_list\n    output['java']['home'] = spp.java.autodetect_java_home()\n  File "/Applications/Splunk/etc/apps/dbx/bin/spp/java/__init__.py", line 208, in autodetect_java_home\n    return autodetect_java_home_osx()\n  File "/Applications/Splunk/etc/apps/dbx/bin/spp/java/__init__.py", line 220, in autodetect_java_home_osx\n    v = get_java_version(path)\n  File "/Applications/Splunk/etc/apps/dbx/bin/spp/java/__init__.py", line 194, in get_java_version\n    return JavaEnv(java_home=java_home).get_version(overrideOpts=overrideOpts)\n  File "/Applications/Splunk/etc/apps/dbx/bin/spp/java/__init__.py", line 73, in __init__\n    raise JavaVersionException("JAVA_HOME directory %s does not exist" % JAVA_HOME)\nJavaVersionException: JAVA_HOME directory /System/Library/Frameworks/JavaVM.framework/Home does not exist\n
04-30-2015 02:54:57.048 +0200 ERROR AdminManagerExternal - Unexpected error "" from python handler: "JAVA_HOME directory /System/Library/Frameworks/JavaVM.framework/Home does not exist".  See splunkd.log for more details.
04-30-2015 02:54:57.048 +0200 ERROR SetupAdminHandler - Error while fetching url=/servicesNS/nobody/dbx/dbx/install/java/?_strict=true;search=%20eai%3Aacl.app%3D%22%22%20OR%20eai%3Aacl.app%3D%22dbx%22{code}

My java path is:

$ ls -l $(which java javac)
lrwxr-xr-x  1 root  wheel  75 Apr 28 03:43 /usr/bin/javac -> /System/Library/Frameworks/JavaVM.framework/Versions/Current/Commands/javac
lrwxr-xr-x  1 root  wheel  75 Apr 28 03:43 /usr/bin/javac -> /System/Library/Frameworks/JavaVM.framework/Versions/Current/Commands/javac

Any ideas what is wrong with it?

1 Solution

esix_splunk
Splunk Employee
Splunk Employee

Which version of Java do you have installed? DBConnect V1.x only supports Java v1.6 and 1.7, and not v 1.8.

View solution in original post

tskinnerivsec
Contributor

I have found that dbx 1.1.6 with java 1.7 seems to be the most stable for the use cases I run into. The main issue I run into when using the newer v2 vesion of svc is that I can't configure it to tail a log correctly. But version 1.1.6. still does that very well.

esix_splunk
Splunk Employee
Splunk Employee

Which version of Java do you have installed? DBConnect V1.x only supports Java v1.6 and 1.7, and not v 1.8.

Edmondi
Explorer

I have installed the last version of 1.8. Because 1.7 is currently

[End of Public Updates for Oracle JDK 7][1]

I can't install a version of java that wan't be update at this time.
DB Connect v1. should fix this.

0 Karma

esix_splunk
Splunk Employee
Splunk Employee

Look at dbconnect v2.

Edmondi
Explorer

Done and it looks good.
Thanks

0 Karma
Get Updates on the Splunk Community!

Observability | How to Think About Instrumentation Overhead (White Paper)

Novice observability practitioners are often overly obsessed with performance. They might approach ...

Cloud Platform | Get Resiliency in the Cloud Event (Register Now!)

IDC Report: Enterprises Gain Higher Efficiency and Resiliency With Migration to Cloud  Today many enterprises ...

The Great Resilience Quest: 10th Leaderboard Update

The tenth leaderboard update (11.23-12.05) for The Great Resilience Quest is out >> As our brave ...