This is an explanation of the root cause, and not an answer/solution as such. Upon ingesting over thirty different log files, Splunk has aggregated eight data lines from three different log files into a single result. ResultsReaderCSV is barfing when it runs past the end of the first line of the multi-line string value. To validate the log file ingestion, I asked our Splunk admins to double-check their configuration for the specific attributes of this file, and they said they were as expected, and correct. I'm guessing the original log file on that date had corrupted line endings on the first line of the event group, and that was throwing off the OpenCSV code that fetches the next line. ... View more

Finally got the stack trace I've been needing. Retrieving results page 8 java.lang.ArrayIndexOutOfBoundsException: 3 at com.splunk.ResultsReaderCsv.getNextEventInCurrentSet(ResultsReaderCsv.java:109) at com.splunk.ResultsReader.getNextElement(ResultsReader.java:87) at com.splunk.ResultsReader.getNextEvent(ResultsReader.java:64) at SplunkQuery.parseSplunkResults(SplunkQuery.java:479) at SplunkQuery.main(SplunkQuery.java:194) ... View more

I'm reducing the Java code to the absolute bare minimum to determine if the problem persists. If it does, then it's definitely the Java SDK. Meanwhile, can anyone provide a reliable Java example of paging through >200K events/results? ... View more

I'm quickly determining the cause may not be the SDK or the ResultsReaderCsv, but my Java code. When I find it, I will post the resolution. Thank you for reading. ... View more

Additional server info: Splunk>enterprise 7.3.2 Version:7.3.2 Build: c60db69f8e32 ... View more

Try this instead: ServiceArgs serviceArgs = new ServiceArgs(); serviceArgs.setHost("mycompanysplunkServer.net"); // complete url https://mycompanysplunkServer.net serviceArgs.setPort(8089); serviceArgs.setUsername("myusername"); serviceArgs.setPassword("mypassword"); serviceArgs.setSslSecurityProtocol( SSLSecurityProtocol.TLSv1_2 ); ... View more