All Apps and Add-ons

Why am i getting JMSRuntime Exception NoClassDefFoundError attempting to connect splunk to MQ via bindings file

stlarsen
New Member

Running Splunk 7.1.1 on a Windows 7 Enterprise VM. Followed instructions for setting up JMS Messaging Module to connect to remote MQ Queue using connection factory. Copied different versions of MQ client jar files (8.0.0.10, 7.5.x.x) to the jms_ta folder and got different errors, but still can't get to the point where it actually tries connecting to the remote MQ Queue Manager. These are the messages I am seeing in the splunkd.log:

07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" Stanza jms://queue/:SplunkQueue : Error connecting : java.lang.NoClassDefFoundError: javax/jms/JMSRuntimeException
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" at com.ibm.mq.jms.MQConnectionFactoryFactory.getObjectInstance(MQConnectionFactoryFactory.java:83)
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" at javax.naming.spi.NamingManager.getObjectInstance(NamingManager.java:321)
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" at com.sun.jndi.fscontext.RefFSContext.lookup(RefFSContext.java:146)
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" at com.sun.jndi.fscontext.FSContext.lookup(FSContext.java:127)
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" at javax.naming.InitialContext.lookup(InitialContext.java:417)
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" at com.splunk.modinput.jms.JMSModularInput$MessageReceiver.connect(Unknown Source)
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" at com.splunk.modinput.jms.JMSModularInput$MessageReceiver.run(Unknown Source)
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" Caused by: java.lang.ClassNotFoundException: javax.jms.JMSRuntimeException
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" at java.net.URLClassLoader.findClass(URLClassLoader.java:381)
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:331)
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
07-19-2018 08:06:55.187 -0600 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\jms_ta\bin\jms.py"" ... 7 more

0 Karma
1 Solution

Damien_Dallimor
Ultra Champion

I'm guessing that the jms provider jars for MQ that you are using are referring to javax.jms.JMSRuntimeException , which is not shipped in the core JMS App. Try using MQ jars pre version 8.

View solution in original post

0 Karma

Damien_Dallimor
Ultra Champion

I'm guessing that the jms provider jars for MQ that you are using are referring to javax.jms.JMSRuntimeException , which is not shipped in the core JMS App. Try using MQ jars pre version 8.

0 Karma

stlarsen
New Member

Thanks Damien. I had tried that before with no success, but based on your response, I completely reinstalled everything, then copied in the MQ v7 jar files and it started right up!

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...