Hi,
I'm attempting (badly) to get the Splunk DB Connect add-on working. Here is what I've done so far:
Installed the heavy forwarder on the same host as the Oracle DB
Configured it to talk to the Splunk Cloud server
Installed Java JDK 8. Also tried JRE 1.8
Configured the settings
What happens is JRE comes up but the RPC Service is down. What am I missing?
Here is the log entry in the dbx2.log that just keeps repeating
2017-01-20T12:02:32-0600 [CRITICAL] [rpcstart.py], line 381: action=rpc_server_has_been_abnormally_terminated error=Error: Could not find or load main class com.splunk.dbx2.rpc.RPCServer
Traceback (most recent call last):
File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/rpcstart.py", line 379, in <module>
_start_rpc_server(sys.stdin.read())
File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/rpcstart.py", line 363, in _start_rpc_server
run(configs)
File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/rpcstart.py", line 260, in run
raise RpcServerStartupException(stderr.split('\n')[0])
RpcServerStartupException: Error: Could not find or load main class com.splunk.dbx2.rpc.RPCServer
2017-01-20T12:02:47-0600 [INFO] [rpcstart.py], line 366: action=run_rpc_start rpc_start_pid=5665 args=['/opt/splunk/etc/apps/splunk_app_db_connect/bin/rpcstart.py']
2017-01-20T12:02:47-0600 [INFO] [rpcstart.py], line 125: action=start_to_run_rpc_server rpc_start_pid=5665
2017-01-20T12:02:47-0600 [INFO] [rpcstart.py], line 198: action=starting_up_rpc_server_with_command command="[u'/usr/java/jdk1.8.0_121/bin/java', u'-XX:+UseConcMarkSweepGC', '-classpath', '/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc6dms.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/simplefan.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc5_g.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc5dms_g.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc6dms_g.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc6.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc5.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc5dms.jar:/opt/splunk/etc/apps/splunk_app_db_connect/bin/lib/ojdbc6_g.jar', '-DSPLUNK_HOME=/opt/splunk', 'com.splunk.dbx2.rpc.RPCServer', u'127.0.0.1:9998']"
2017-01-20T12:02:47-0600 [INFO] [rpcstart.py], line 243: action=rpc_server_process_is_launched rpc_start_pid=5665 rpc_server_pid=5715
2017-01-20T12:02:47-0600 [INFO] [rpcstart.py], line 259: action=stderr_from_terminated_rpc_server rpc_start_pid=5665 rpc_server_pid=5715 stderr=Error: Could not find or load main class com.splunk.dbx2.rpc.RPCServer
2017-01-20T12:02:47-0600 [CRITICAL] [rpcstart.py], line 381: action=rpc_server_has_been_abnormally_terminated error=Error: Could not find or load main class com.splunk.dbx2.rpc.RPCServer
Traceback (most recent call last):
File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/rpcstart.py", line 379, in <module>
_start_rpc_server(sys.stdin.read())
File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/rpcstart.py", line 363, in _start_rpc_server
run(configs)
File "/opt/splunk/etc/apps/splunk_app_db_connect/bin/rpcstart.py", line 260, in run
raise RpcServerStartupException(stderr.split('\n')[0])
RpcServerStartupException: Error: Could not find or load main class com.splunk.dbx2.rpc.RPCServer