I am using Splunk 8.2.1 with DB Connect 3.5.1 with OpenJDK 1.8.0.332 on Linux (RHEL), this is an airgapped system so I cannot paste the logs.
After installing DB Connect and restarting Splunk, DB Connect fails to start on both dbxquery.sh and server.sh
On both scripts, after TrustManagerUtil - action=load_key_manager_succeed
it throws an ExceptionInitializerError for SplunkServiceBuilder.<clinit>(SplunkServiceBuilder.java:19)
complaining about:
Error setting up SSL socket factory: java.security.NoSuchAlgorithmException: SSL SSLContext not available
In my java.security i h ave:
jdk.disabled.namedCurves = secp256k1
i have commented out (for testing) jdk.certpath.disabledAlgorithms, jdk.jar.disabledAlgorithms, jdk.tls.disabledAlgorithms
however I still get this error.
It's the first time i'm seeing this so looking for guidance.
Thanks
Unfortunately No, I have abandoned trying to fix this until I have the time to upgrade to Splunk 9.0.x and see if it works.
I wouldn't count on it working magically after splunk upgrade. It's an internal dbconnect issue caused by something java-related so upgrading the component which receives data from the modular input most probably won't help much.
It sounds like it could be related by some mismatch between splunk's ssl settings and what's available in your JRE (or alternatively between dbconnect and database).
Were you able to find a solution?