All Apps and Add-ons

JMS Messaging Modular Input: Why is nothing happening with my current inputs.conf configuration?

plarkin01
Explorer

I have the following configuration in the inputs.conf file, but nothing seems to be happening. I loaded up the bin folder with all the jars that are needed, but there is no logging to the $SPLUNK_HOME/var/log/splunk/splunkd.log. I am just kind of wondering how we are supposed to know if a connection was made or if errors are occurring. Thanks.

[jms://topic/EventTopic]
init_mode = jndi
jms_connection_factory_name = RemoteConnectionFactory
jndi_initialcontext_factory = org.jboss.naming.remote.client.InitialContextFactory
jndi_provider_url = remote://remote.testing:4447
durable = false
sourcetype = syslog
0 Karma

Damien_Dallimor
Ultra Champion

Any errors can be searched with : index=_internal ExecProcessor error jms.py

0 Karma

plarkin01
Explorer

I was able to do that search as well as look at the logs but the issue is nothing is being written. I know the values are correct and when I enter values that I know to be wrong I still do not get any errors. One would assume that if the JMS cannot connect to the topic an error would appear.

0 Karma

Damien_Dallimor
Ultra Champion

Perhaps you have a more systemic error , work through the troubleshooting steps in the docs : https://splunkbase.splunk.com/app/1317/#/documentation

0 Karma

plarkin01
Explorer

That could be the case. If I go through Splunk -> Settings -> Data Inputs -> JMS -> New is it supposed to add something to the input.conf? Currently the only way this is written to is if I open it up and manually add the configuration to it. Thanks .

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...