All Apps and Add-ons

Why is DB Connect failing to start?

Viorel
Explorer

I am using Splunk 8.2.1 with DB Connect 3.5.1 with OpenJDK 1.8.0.332 on Linux (RHEL), this is an airgapped system so I cannot paste the logs.

After installing DB Connect and restarting Splunk, DB Connect fails to start on both dbxquery.sh and server.sh

On both scripts, after TrustManagerUtil - action=load_key_manager_succeed

it throws an ExceptionInitializerError for SplunkServiceBuilder.<clinit>(SplunkServiceBuilder.java:19)

complaining about:

Error setting up SSL socket factory: java.security.NoSuchAlgorithmException: SSL SSLContext not available

 

In my java.security i h ave:

 

jdk.disabled.namedCurves = secp256k1

i have commented out (for testing) jdk.certpath.disabledAlgorithms, jdk.jar.disabledAlgorithms, jdk.tls.disabledAlgorithms

however I still get this error.

 

It's the first time i'm seeing this so looking for guidance.

Thanks

Labels (1)
Tags (1)
0 Karma

Viorel
Explorer

Unfortunately No, I have abandoned trying to fix this until I have the time to upgrade to Splunk 9.0.x and see if it works.

0 Karma

PickleRick
SplunkTrust
SplunkTrust

I wouldn't count on it working magically after splunk upgrade. It's an internal dbconnect issue caused by something java-related so upgrading the component which receives data from the modular input most probably won't help much.

It sounds like it could be related by some mismatch between splunk's ssl settings and what's available in your JRE (or alternatively between dbconnect and database).

0 Karma

esalesap
Path Finder

Were you able to find a solution?

0 Karma
Get Updates on the Splunk Community!

Modern way of developing distributed application using OTel

Recently, I had the opportunity to work on a complex microservice using Spring boot and Quarkus to develop a ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had 3 releases of new security content via the Enterprise Security ...

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...