All Apps and Add-ons

Splunk DB Connect: How to resolve when RPC Service is down when initially setting up the add-on?

dbcase
Motivator

Hi,

I'm attempting (badly) to get the Splunk DB Connect add-on working. Here is what I've done so far:

Installed the heavy forwarder on the same host as the Oracle DB
Configured it to talk to the Splunk Cloud server
Installed Java JDK 8. Also tried JRE 1.8
Configured the settings

What happens is JRE comes up but the RPC Service is down. What am I missing?

1 Solution

dbcase
Motivator

Here is the log entry in the dbx2.log that just keeps repeating

2017-01-20T12:02:32-0600 [CRITICAL] [rpcstart.py], line 381: action=rpc_server_has_been_abnormally_terminated error=Error: Could not find or load main class com.splunk.dbx2.rpc.RPCServer
Traceback (most recent call last):
  File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/rpcstart.py", line 379, in <module>
    _start_rpc_server(sys.stdin.read())
  File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/rpcstart.py", line 363, in _start_rpc_server
    run(configs)
  File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/rpcstart.py", line 260, in run
    raise RpcServerStartupException(stderr.split('\n')[0])
RpcServerStartupException: Error: Could not find or load main class com.splunk.dbx2.rpc.RPCServer
2017-01-20T12:02:47-0600 [INFO] [rpcstart.py], line 366: action=run_rpc_start rpc_start_pid=5665 args=['/opt/splunk/etc/apps/splunk_app_db_connect/bin/rpcstart.py']
2017-01-20T12:02:47-0600 [INFO] [rpcstart.py], line 125: action=start_to_run_rpc_server rpc_start_pid=5665
2017-01-20T12:02:47-0600 [INFO] [rpcstart.py], line 198: action=starting_up_rpc_server_with_command command="[u'/usr/java/jdk1.8.0_121/bin/java', u'-XX:+UseConcMarkSweepGC', '-classpath', '/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc6dms.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/simplefan.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc5_g.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc5dms_g.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc6dms_g.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc6.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc5.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc5dms.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc6_g.jar', '-DSPLUNK_HOME=/opt/splunk', 'com.splunk.dbx2.rpc.RPCServer', u'127.0.0.1:9998']"
2017-01-20T12:02:47-0600 [INFO] [rpcstart.py], line 243: action=rpc_server_process_is_launched rpc_start_pid=5665 rpc_server_pid=5715
2017-01-20T12:02:47-0600 [INFO] [rpcstart.py], line 259: action=stderr_from_terminated_rpc_server rpc_start_pid=5665 rpc_server_pid=5715 stderr=Error: Could not find or load main class com.splunk.dbx2.rpc.RPCServer

2017-01-20T12:02:47-0600 [CRITICAL] [rpcstart.py], line 381: action=rpc_server_has_been_abnormally_terminated error=Error: Could not find or load main class com.splunk.dbx2.rpc.RPCServer
Traceback (most recent call last):
  File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/rpcstart.py", line 379, in <module>
    _start_rpc_server(sys.stdin.read())
  File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/rpcstart.py", line 363, in _start_rpc_server
    run(configs)
  File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/rpcstart.py", line 260, in run
    raise RpcServerStartupException(stderr.split('\n')[0])
RpcServerStartupException: Error: Could not find or load main class com.splunk.dbx2.rpc.RPCServer
0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...