Installation

Splunk Db Connect not working after installation (The Java Bridge server is *not running*)

jgomez2011
Explorer

Background:
We have installed Splunk Db Connect in various Splunk servers and it has worked out of the box. However, in this particular server after installation of Splunk Db Connect the Java Bridge server cannot start successfully. We have the same server version of the JDK 1.7.0_51 installed which has been used in other Splunk installations of Splunk Db Connect.

The Splunk web UI shows the following message after providing the path to the JDK:

Welcome to Splunk DB Connect - the generic SQL database connector for Splunk

The Java Bridge server is not running

When we look at the jbridge.log file we see the following error:

2014-06-26 12:00:21,677 INFO Started JavaBridgeServer PID=3336
2014-06-26 12:00:23,144 ERROR Java process returned error code 1! Error: Initializing Splunk context... Environment:
SplunkEnvironment{SPLUNK_HOME=E:\server\splunk,SPLUNK_DB=E:\server\splunk\var\lib\splunk}
Configuring Log4j... Exception in thread "main" com.splunk.config.SplunkConfigurationException: IO Error while reading configuration from Splunkd:
javax.net.ssl.SSLException: Unrecognized SSL message, plaintext connection?

at com.splunk.config.rest.RESTAdapter.request(RESTAdapter.java:195)

at com.splunk.config.rest.RESTAdapter.readConfig(RESTAdapter.java:203)

at com.splunk.config.cache.CachedConfigurationAdapter.readConfig(CachedConfigurationAdapter.java:32)

at com.splunk.config.cache.CachedConfigurationAdapter.readStanza(CachedConfigurationAdapter.java:40)

at com.splunk.env.SplunkContext.getConfigStanza(SplunkContext.java:313)

at com.splunk.env.SplunkContext.initialize(SplunkContext.java:128)

at com.splunk.bridge.JavaBridgeServer.main(JavaBridgeServer.java:34)
Caused by: javax.net.ssl.SSLException: Unrecognized SSL message, plaintext connection?

at sun.security.ssl.InputRecord.handleUnknownRecord(InputRecord.java:671)

at sun.security.ssl.InputRecord.read(InputRecord.java:504)

at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:927)

at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1312)

at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1339)

at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1323)

at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:563)

at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.jav...

at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153)

at com.splunk.rest.Splunkd.request(Splunkd.java:212)

at com.splunk.rest.Splunkd.request(Splunkd.java:98)

at com.splunk.config.rest.RESTAdapter.request(RESTAdapter.java:193) ... 6 more
2014-06-26 12:00:23,144 ERROR Command output: None

Any help would be greatly appreciated.

Regards,

-Juan

1 Solution

mgarcia_splunk
Splunk Employee
Splunk Employee

This is indicating that a plaintext connection is being made to splunkd when it's expecting an SSL connection. Have you set enableSplunkdSSL to false in $SPLUNK_HOME/etc/system/local/server.conf? Or changed the splunkd certificate or cipher suite?

View solution in original post

mgarcia_splunk
Splunk Employee
Splunk Employee

This is indicating that a plaintext connection is being made to splunkd when it's expecting an SSL connection. Have you set enableSplunkdSSL to false in $SPLUNK_HOME/etc/system/local/server.conf? Or changed the splunkd certificate or cipher suite?

jgomez2011
Explorer

Your answer was spot on.

We had enableSplunkdSSL set to false in $SPLUNK_HOME/etc/system/local/server.conf for this Splunk installation.

Thank you.

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...