Error When Running Splunk Dynatrace Integration
Hello! This is splunk related question regarding the Dynatrace App found here:
Splunk Application I followed the documentation as best as I could, but right now port 4321 (on splunk) is not opening for Business Transaction Exports and I am finding these errors in splunk: 01-07-2015 11:52:10.408 -0800 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\APM_dynatrace\bin\
runFlume.py"" Execution failed: [Error 2] The system cannot find the file specified
Has anyone encountered this before? I searched the web and couldn't find anything related to this issue. There were a few references of not being able to find files specified, but those files were actually missing in those cases.
The file that splunk says is missing is indeed there, which leads me to believe this is a permissions related issue, but I have fiddled with all the permissions I could think of to no avail.
Thanks for any help in advance! Dave
Has anyone encountered this before? I searched the web and couldn't find anything related to this issue. There were a few references of not being able to find files specified, but those files were actually missing in those cases.
The file that splunk says is missing is indeed there, which leads me to believe this is a permissions related issue, but I have fiddled with all the permissions I could think of to no avail.
Thanks for any help in advance! Dave
I tried the manual execution, and that's when I found the real problem, there was a java error when executing a .jar file. I tried manually executing the .jar file and found that Java had not been added to my path.
Once I added Java to my path and restarted splunk everything is working as intended. We are now rolling out Splunk and Dynatrace integrations. Thanks for your help Jan!
Hi,
you say that port 4321 is not opening, so I assume that you made a netstat -an or something similar to check this.
When the port is not in the list, it means, that the flume is not running. So you may try two things:
Check the inputs.conf, if the script is enabled. Go to APM_dynatrace/default/inputs.conf and check those settings
[script://$SPLUNK_HOME/etc/apps/APM_dynatrace/bin/runFlume.py] disabled = false interval = 30 source = java sourcetype = java
Or start the flume manually by executing the runFlume.py. Then check, if the port is open.
Regards,
Jan
