Splunk Search

Exception when running a search in Hunk

Ledion_Bitincka
Splunk Employee
Splunk Employee

I see the following exception in search.log when running a Hunk search against my cluster:

Exception in thread "main" java.lang.NoSuchMethodError: org.codehaus.jackson.map.ObjectMapper.writeValueAsString(Ljava/lang/Object;)Ljava/lang/String;
Tags (1)
0 Karma
1 Solution

Ledion_Bitincka
Splunk Employee
Splunk Employee

This error is caused by older versions of Hadoop distributions shipping with a very old version of Jackson JSON parser. This issue was tracked via HADOOP-7470 and fixed in Hadoop 1.0.1. Therefore if you're using a Hadoop version older than 1.0.1 you are very likely to run into this problem as well. Hadoop 1.0.1 shipped on Feb 2012, and we strongly recommend that you upgrade your deployment to a more recent version.

If upgrading is not an option, then you can fix this issue by following these steps:

  1. download jackson-core-asl-1.8.8.jar and jackson-mapper-asl-1.8.8.jar
  2. place them in a directory in the Hunk server, e.g. /opt/jackson/jars/
  3. add the following config setting to the provider in Hunk (Settings >> Virtual Indexes) or by editing indexes.conf

    vix.splunk.jars = /path/to/jackson/jars/dir/

View solution in original post

Ledion_Bitincka
Splunk Employee
Splunk Employee

This error is caused by older versions of Hadoop distributions shipping with a very old version of Jackson JSON parser. This issue was tracked via HADOOP-7470 and fixed in Hadoop 1.0.1. Therefore if you're using a Hadoop version older than 1.0.1 you are very likely to run into this problem as well. Hadoop 1.0.1 shipped on Feb 2012, and we strongly recommend that you upgrade your deployment to a more recent version.

If upgrading is not an option, then you can fix this issue by following these steps:

  1. download jackson-core-asl-1.8.8.jar and jackson-mapper-asl-1.8.8.jar
  2. place them in a directory in the Hunk server, e.g. /opt/jackson/jars/
  3. add the following config setting to the provider in Hunk (Settings >> Virtual Indexes) or by editing indexes.conf

    vix.splunk.jars = /path/to/jackson/jars/dir/

Get Updates on the Splunk Community!

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...

Updated Team Landing Page in Splunk Observability

We’re making some changes to the team landing page in Splunk Observability, based on your feedback. The ...

New! Splunk Observability Search Enhancements for Splunk APM Services/Traces and ...

Regardless of where you are in Splunk Observability, you can search for relevant APM targets including service ...