Splunk Search

Splunk Input step in Pentaho PDI is unable to run query on Splunk with error "SSL peer shut down incorrectly"

hkosuru
Explorer

Hi All,

I am trying to use Splunk Input step in Pentaho PDI. I am getting the following Exception. Any idea what is going on? I am using port 8089.

Thanks,
Bindu

java.lang.RuntimeException: Remote host closed connection during handshake
Remote host closed connection during handshake
    at org.pentaho.di.trans.steps.splunk.b.a(SourceFile:327)
    at org.pentaho.di.trans.steps.splunk.SplunkInputDialog$8.run(SourceFile:573)
    at org.eclipse.jface.operation.ModalContext$ModalContextThread.run(ModalContext.java:113)
Caused by: java.lang.RuntimeException: Remote host closed connection during handshake
    at com.splunk.HttpService.send(HttpService.java:314)
    at com.splunk.Service.send(Service.java:1203)
    at com.splunk.HttpService.post(HttpService.java:212)
    at com.splunk.Service.login(Service.java:1040)
    at com.splunk.Service.login(Service.java:1020)
    at com.splunk.Service.connect(Service.java:161)
    at org.pentaho.di.trans.steps.splunk.b.a(SourceFile:151)
    at org.pentaho.di.trans.steps.splunk.b.a(SourceFile:209)
    ... 2 more
Caused by: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake
    at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:992)
    at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375)
    at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403)
    at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387)
    at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:563)
    at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
    at sun.net.www.protocol.http.HttpURLConnection.getOutputStream0(HttpURLConnection.java:1282)
    at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:1257)
    at sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:250)
    at com.splunk.HttpService.send(HttpService.java:307)
    ... 9 more
Caused by: java.io.EOFException: SSL peer shut down incorrectly
    at sun.security.ssl.InputRecord.read(InputRecord.java:505)
    at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:973)
    ... 18 more
0 Karma

hkosuru
Explorer

We resolved this issue, now we are getting com.splunk.HttpException: HTTP 400.
Has anyone tried to access Splunk from Pentaho PDI? Any specific instructions to enable this functionality?

com.splunk.HttpException: HTTP 400
HTTP 400
at org.pentaho.di.trans.steps.splunk.b.a(SourceFile:327)
at org.pentaho.di.trans.steps.splunk.SplunkInputDialog$8.run(SourceFile:573)
at org.eclipse.jface.operation.ModalContext$ModalContextThread.run(ModalContext.java:113)
Caused by: com.splunk.HttpException: HTTP 400
at com.splunk.HttpException.create(HttpException.java:59)
at com.splunk.HttpService.send(HttpService.java:355)
at com.splunk.Service.send(Service.java:1203)
at com.splunk.HttpService.post(HttpService.java:212)
at com.splunk.Service.login(Service.java:1040)
at com.splunk.Service.login(Service.java:1020)
at com.splunk.Service.connect(Service.java:161)
at org.pentaho.di.trans.steps.splunk.b.a(SourceFile:151)
at org.pentaho.di.trans.steps.splunk.b.a(SourceFile:209)
... 2 more

0 Karma
Get Updates on the Splunk Community!

The All New Performance Insights for Splunk

Splunk gives you amazing tools to analyze system data and make business-critical decisions, react to issues, ...

Good Sourcetype Naming

When it comes to getting data in, one of the earliest decisions made is what to use as a sourcetype. Often, ...

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...