I am having similar issue to that described here
I am running Splunk6 and DB Connect 1.1.1 on a Linux VM. When I installed it, it ran well yesterday, but after starting Splunk today I get Java Bridge not running, and the following errors that have been previously been reported.
message from "python /home/frank/splunk6/splunk/etc/apps/dbx/bin/jbridge_server.py" No handlers could be found for logger "spp.java"
Any suggestions on how to resolve this ?
The 1.1.1 version of the code already hase the exception handling changes suggested.
logger = logging.getLogger("spp.java")
logger = logging.getLogger()
Thanks / Frank
... View more
We have been testing Splunk processing Apache access logs that we have defined using a custom log entry to output key=value pairs. For the last month everything has been working nicely, allowing us to search based on field names and values.
For example, source_type="apachekv" field1 > 30 etc
But what we have recently noticed is that for one event in the Splunk Web UI, we are now getting 2,3 or more or more apache access lines concatenated into one single Splunk event being displayed.When I look at the raw apache logfile, each entry is on a single line and looks ok.
We are using version 4.3.3, build 128297.
Has anyone seen this before. I did see an old Changelog entry (12/5/2011) about a fix for concatenated lines in Apache.
Cheers / Frank
... View more