Splunk Dev

java bridge server issue

dlovett
Path Finder

We are having issues with the Java Bridge Server. We are running splunk 4.3.4 as a search head in a windows VM. The server got restarted and the Java Bridge Server has not been able to come up.The following is continuously written out to dbx.log:

2013-05-17 16:05:49.544 main:INFO:Splunkd - Initialized Splunkd REST service service=127.0.0.1:8089 sessionKey=83143deb1f384a402ea7a4d009c5c62e 2013-05-17 16:05:49.544 main:DEBUG:PersistentValueStoreFactory
- Default type xstream 2013-05-17 16:05:49.544 main:DEBUG:PersistentValueStoreFactory
- Adding type=jdbm class=com.splunk.persistence.impl.JdbmStore 2013-05-17 16:05:49.544 main:DEBUG:PersistentValueStoreFactory
- Adding type=xstream class=com.splunk.persistence.impl.XStreamStore 2013-05-17 16:05:49.559 main:DEBUG:XStreamStore - Initialized XStreamStore at E:\Program Files\Splunk\var\lib\splunk\persistentstorage\dbx\global\state.xml 2013-05-17 16:05:49.653 main:DEBUG:XStreamStore - Loading state from XML file...

jbridge.log has this error:

4:23:24.805 PM  
2013-05-17 16:23:24,805 DEBUG Error waiting for process: Java process returned error code 1! Error: Initializing Splunk context... Environment: SplunkEnvironment{SPLUNK_HOME=E:\Program Files\Splunk,SPLUNK_DB=E:\Program Files\Splunk\var\lib\splunk} Configuring Log4j... [Fatal Error] :1:1: Premature end of file. 
0 Karma
1 Solution

dlovett
Path Finder

We ended up uninstalling and reinstalling dbx.

View solution in original post

0 Karma

82padarthi
Explorer

If this error appears in the jbridge.log file, you might have a corrupted persistent store file

To resolve this issue, remove $SPLUNK_DB/persistentstorage/dbx/global, recursively.

then restart the splunk .. it will resolve the issues

0 Karma

dlovett
Path Finder

We ended up uninstalling and reinstalling dbx.

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...