All Apps and Add-ons

no records found in splunk

tlnarayana
Path Finder

I see this error in my Jenkins log - is this the reason no records found in splunk. show me some light

Dec 30, 2016 11:03:55 AM SEVERE com.splunk.splunkjenkins.utils.LogConsumer run
will resend the message:{raw data{level=INFO, log_source=hudson.model.AsyncPeriodicWork$1 run, message=Started Splunk data monitor}}
Dec 30, 2016 11:03:59 AM WARNING com.splunk.splunkjenkins.utils.LogConsumer run
content length:234
org.apache.http.conn.HttpHostConnectException: Connect to PC93274:8088 [PC93274/10.91.72.77, PC93274/10.91.80.126, PC93274/0:0:0:0:0:0:0:1] failed: Connection refused: connect
at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:158)
at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:353)
at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:380)
at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)
at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:184)
at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:88)
at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)
at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:184)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:71)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:220)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:164)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:139)
at com.splunk.splunkjenkins.utils.LogConsumer.run(LogConsumer.java:84)
Caused by: java.net.ConnectException: Connection refused: connect
at java.net.DualStackPlainSocketImpl.connect0(Native Method)
at java.net.DualStackPlainSocketImpl.socketConnect(Unknown Source)
at java.net.AbstractPlainSocketImpl.doConnect(Unknown Source)
at java.net.AbstractPlainSocketImpl.connectToAddress(Unknown Source)
at java.net.AbstractPlainSocketImpl.connect(Unknown Source)
at java.net.PlainSocketImpl.connect(Unknown Source)
at java.net.SocksSocketImpl.connect(Unknown Source)
at java.net.Socket.connect(Unknown Source)
at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:337)
at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:141)
... 12 more

Dec 30, 2016 11:03:59 AM SEVERE com.splunk.splunkjenkins.utils.LogConsumer run
will resend the message:{raw data{level=INFO, log_source=hudson.model.AsyncPeriodicWork$1 run, message=Finished Splunk data monitor. 0 ms}}
Dec 30, 2016 11:03:59 AM WARNING com.splunk.splunkjenkins.utils.LogConsumer run
content length:227
org.apache.http.conn.HttpHostConnectException: Connect to PC93274:8088 [PC93274/10.91.72.77, PC93274/10.91.80.126, PC93274/0:0:0:0:0:0:0:1] failed: Connection refused: connect
at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:158)
at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:353)
at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:380)
at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)
at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:184)
at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:88)
at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)
at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:184)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:71)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:220)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:164)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:139)
at com.splunk.splunkjenkins.utils.LogConsumer.run(LogConsumer.java:84)
Caused by: java.net.ConnectException: Connection refused: connect
at java.net.DualStackPlainSocketImpl.connect0(Native Method)
at java.net.DualStackPlainSocketImpl.socketConnect(Unknown Source)
at java.net.AbstractPlainSocketImpl.doConnect(Unknown Source)
at java.net.AbstractPlainSocketImpl.connectToAddress(Unknown Source)
at java.net.AbstractPlainSocketImpl.connect(Unknown Source)
at java.net.PlainSocketImpl.connect(Unknown Source)
at java.net.SocksSocketImpl.connect(Unknown Source)
at java.net.Socket.connect(Unknown Source)
at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:337)
at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:141)
... 12 more

Tags (1)
0 Karma
1 Solution

tlnarayana
Path Finder

thanks for the reply.
FYI - my Jenkins and splunk installed in my laptop - ie localhost

telnet PC93274 8088 ==> gives no error.

View solution in original post

0 Karma

tlnarayana
Path Finder

1) I have no access to reply to your comments.
when I click submit button always ask - do you want to open or save add.json from answers.splunk.com

2) not sure how to check firewall blocking !?

3) yes - correct port number is configured as per documentation in Jenkins

4) I can open the same in webbrowser

0 Karma

tlnarayana
Path Finder

not yet resolved

0 Karma

tlnarayana
Path Finder

thanks for the reply.
FYI - my Jenkins and splunk installed in my laptop - ie localhost

telnet PC93274 8088 ==> gives no error.

0 Karma

jkat54
SplunkTrust
SplunkTrust

"failed: Connection refused: connect" usually means there is a firewall blocking the port or the server you're connecting to isnt listening on that port.

You could try 'telnet PC93274 8088' at a terminal to see if you get a "connection refused" error there too.

You could try curl as well.

On the server youre connecting to you can run netstat -an to see if 0.0.0.0 (or the IP of that server) is LISTENING on 8088.

If you have a networking team, you'll probably want to contact them for assistance.

0 Karma

tlnarayana
Path Finder

I have no access to reply to your comments.

0 Karma

txiao_splunk
Splunk Employee
Splunk Employee

try use 127.0.0.1 as hostname which will bypass firewall. If it is still not work, I guess you didn't configure http event collector correctly, To enable it, go to Splunk Settings > Data inputs > HTTP Event Collector.
Then click the Global Settings button in the upper-right corner.
You can configure HTTP Port number and SSL on the Global Settings.

0 Karma

jkat54
SplunkTrust
SplunkTrust

Why did you mark your answer as the solution?

Is windows firewall blocking the connection?

Do you have the correct port number?

Can you open the same in a web browser?

0 Karma

tlnarayana
Path Finder

not yet resolved 😞

0 Karma

jkat54
SplunkTrust
SplunkTrust

So is the problem solved?

0 Karma

tlnarayana
Path Finder

thanks for the reply.
FYI - my Jenkins and splunk installed in my laptop - ie localhost

telnet PC93274 8088 ==> gives no error

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...