Security

Errors trying to set up Splunk DB Connect 1 on OSX?

Edmondi
Explorer

I have a clean install of OSX 10.10.3 and necessary apps, jre & jdk, on it. Then I installed splunk enterprise.
After installing db connect v1 and trying to set it up i get the following error from splunkd.log:

04-30-2015 02:54:57.048 +0200 ERROR AdminManagerExternal - Stack trace from python handler:\nTraceback (most recent call last):\n  File "/Applications/Splunk/lib/python2.7/site-packages/splunk/admin.py", line 70, in init\n    hand.execute(info)\n  File "/Applications/Splunk/lib/python2.7/site-packages/splunk/admin.py", line 527, in execute\n    if self.requestedAction == ACTION_LIST:     self.handleList(confInfo)\n  File "/Applications/Splunk/etc/apps/dbx/bin/spp/config.py", line 327, in handleList\n    self.process_list(output)\n  File "/Applications/Splunk/etc/apps/dbx/bin/rest_handler_dbx_setup.py", line 32, in process_list\n    output['java']['home'] = spp.java.autodetect_java_home()\n  File "/Applications/Splunk/etc/apps/dbx/bin/spp/java/__init__.py", line 208, in autodetect_java_home\n    return autodetect_java_home_osx()\n  File "/Applications/Splunk/etc/apps/dbx/bin/spp/java/__init__.py", line 220, in autodetect_java_home_osx\n    v = get_java_version(path)\n  File "/Applications/Splunk/etc/apps/dbx/bin/spp/java/__init__.py", line 194, in get_java_version\n    return JavaEnv(java_home=java_home).get_version(overrideOpts=overrideOpts)\n  File "/Applications/Splunk/etc/apps/dbx/bin/spp/java/__init__.py", line 73, in __init__\n    raise JavaVersionException("JAVA_HOME directory %s does not exist" % JAVA_HOME)\nJavaVersionException: JAVA_HOME directory /System/Library/Frameworks/JavaVM.framework/Home does not exist\n
04-30-2015 02:54:57.048 +0200 ERROR AdminManagerExternal - Unexpected error "" from python handler: "JAVA_HOME directory /System/Library/Frameworks/JavaVM.framework/Home does not exist".  See splunkd.log for more details.
04-30-2015 02:54:57.048 +0200 ERROR SetupAdminHandler - Error while fetching url=/servicesNS/nobody/dbx/dbx/install/java/?_strict=true;search=%20eai%3Aacl.app%3D%22%22%20OR%20eai%3Aacl.app%3D%22dbx%22{code}

My java path is:

$ ls -l $(which java javac)
lrwxr-xr-x  1 root  wheel  75 Apr 28 03:43 /usr/bin/javac -> /System/Library/Frameworks/JavaVM.framework/Versions/Current/Commands/javac
lrwxr-xr-x  1 root  wheel  75 Apr 28 03:43 /usr/bin/javac -> /System/Library/Frameworks/JavaVM.framework/Versions/Current/Commands/javac

Any ideas what is wrong with it?

1 Solution

esix_splunk
Splunk Employee
Splunk Employee

Which version of Java do you have installed? DBConnect V1.x only supports Java v1.6 and 1.7, and not v 1.8.

View solution in original post

tskinnerivsec
Contributor

I have found that dbx 1.1.6 with java 1.7 seems to be the most stable for the use cases I run into. The main issue I run into when using the newer v2 vesion of svc is that I can't configure it to tail a log correctly. But version 1.1.6. still does that very well.

esix_splunk
Splunk Employee
Splunk Employee

Which version of Java do you have installed? DBConnect V1.x only supports Java v1.6 and 1.7, and not v 1.8.

Edmondi
Explorer

I have installed the last version of 1.8. Because 1.7 is currently

[End of Public Updates for Oracle JDK 7][1]

I can't install a version of java that wan't be update at this time.
DB Connect v1. should fix this.

0 Karma

esix_splunk
Splunk Employee
Splunk Employee

Look at dbconnect v2.

Edmondi
Explorer

Done and it looks good.
Thanks

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...