Logs forwarding to Splunk using logback.xml

Julio_Guagnelli · February 6, 2024, 4:18pm

Hello everyone,

I am using the EAM module and unfortunately there is no way to have centralized diagnostics logs for controller and agents.

I have been trying to setup logback.xml file to push those logs to a Splunk http collector event instance.

This is my appender configuration:

"<appender name="SPLUNK" class="com.splunk.logging.HttpEventCollectorLogbackAppender">
        <url>https://localhost:8188</url>
        <token>54443b08-3baf-42f8-b588-ff2a7b3ed50e</token>
        <index>main</index>
        <disableCertificateValidation>true</disableCertificateValidation>
        <layout class="ch.qos.logback.classic.PatternLayout">
            <pattern>%msg</pattern>
        </layout>
    </appender>

I have downloaded the splunk-library-javalogging-1.11.8.jar and added to the lib folder, but I am still getting this error: com.splunk.logging.HttpEventCollectorLogbackAppender

Has anyone tried to forward logs to splunk?

Thanks in advance!

pturmel · February 6, 2024, 4:28pm

You'll have to supply the complete error with traceback. Please use the "pre-formatted" text feature of the forum's comment editor. Also verify that you have included any dependency jars that splunk requires.

Julio_Guagnelli · February 6, 2024, 4:55pm

Hi Phil , thanks for your swift response.

This is the error:

INFO   | jvm 1    | 2024/02/06 06:31:40 | 06:31:40,251 |-INFO in ch.qos.logback.core.joran.action.AppenderAction - About to instantiate appender of type [com.splunk.logging.HttpEventCollectorLogbackAppender]
INFO   | jvm 1    | 2024/02/06 06:31:40 | 06:31:40,251 |-ERROR in ch.qos.logback.core.joran.action.AppenderAction - Could not create an Appender of type [com.splunk.logging.HttpEventCollectorLogbackAppender]. ch.qos.logback.core.util.DynamicClassLoadingException: Failed to instantiate type com.splunk.logging.HttpEventCollectorLogbackAppender
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at ch.qos.logback.core.util.DynamicClassLoadingException: Failed to instantiate type com.splunk.logging.HttpEventCollectorLogbackAppender
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.util.OptionHelper.instantiateByClassNameAndParameter(OptionHelper.java:68)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.util.OptionHelper.instantiateByClassName(OptionHelper.java:44)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.util.OptionHelper.instantiateByClassName(OptionHelper.java:33)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.joran.action.AppenderAction.begin(AppenderAction.java:52)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.joran.spi.Interpreter.callBeginAction(Interpreter.java:269)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.joran.spi.Interpreter.startElement(Interpreter.java:145)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.joran.spi.Interpreter.startElement(Interpreter.java:128)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.joran.spi.EventPlayer.play(EventPlayer.java:50)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.joran.GenericConfigurator.doConfigure(GenericConfigurator.java:165)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.joran.GenericConfigurator.doConfigure(GenericConfigurator.java:152)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.joran.GenericConfigurator.doConfigure(GenericConfigurator.java:110)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.joran.GenericConfigurator.doConfigure(GenericConfigurator.java:53)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.classic.util.ContextInitializer.configureByResource(ContextInitializer.java:64)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.classic.util.ContextInitializer.autoConfig(ContextInitializer.java:134)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at org.slf4j.impl.StaticLoggerBinder.init(StaticLoggerBinder.java:84)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at org.slf4j.impl.StaticLoggerBinder.<clinit>(StaticLoggerBinder.java:55)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at org.slf4j.LoggerFactory.bind(LoggerFactory.java:150)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at org.slf4j.LoggerFactory.performInitialization(LoggerFactory.java:124)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at org.slf4j.LoggerFactory.getILoggerFactory(LoggerFactory.java:417)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at org.slf4j.LoggerFactory.getLogger(LoggerFactory.java:362)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at com.inductiveautomation.ignition.common.util.LoggerEx$Builder.build(LoggerEx.java:624)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at com.inductiveautomation.ignition.gateway.IgnitionGateway.getLogger(IgnitionGateway.java:3699)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at com.inductiveautomation.ignition.gateway.IgnitionGateway.<init>(IgnitionGateway.java:369)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at com.inductiveautomation.ignition.gateway.IgnitionGateway.main(IgnitionGateway.java:304)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at com.inductiveautomation.catapult.Catapult.main(Catapult.java:8)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at java.base/java.lang.reflect.Method.invoke(Unknown Source)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at org.tanukisoftware.wrapper.WrapperSimpleApp.run(WrapperSimpleApp.java:349)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at java.base/java.lang.Thread.run(Unknown Source)
INFO   | jvm 1    | 2024/02/06 06:31:40 | Caused by: java.lang.ClassNotFoundException: com.splunk.logging.HttpEventCollectorLogbackAppender
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at java.base/jdk.internal.loader.BuiltinClassLoader.loadClass(Unknown Source)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at java.base/jdk.internal.loader.ClassLoaders$AppClassLoader.loadClass(Unknown Source)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at java.base/java.lang.ClassLoader.loadClass(Unknown Source)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.util.OptionHelper.instantiateByClassNameAndParameter(OptionHelper.java:55)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	... 30 common frames omitted
INFO   | jvm 1    | 2024/02/06 06:31:40 | 06:31:40,251 |-ERROR in ch.qos.logback.core.joran.spi.Interpreter@45:90 - ActionException in Action for tag [appender] ch.qos.logback.core.joran.spi.ActionException: ch.qos.logback.core.util.DynamicClassLoadingException: Failed to instantiate type com.splunk.logging.HttpEventCollectorLogbackAppender
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at ch.qos.logback.core.joran.spi.ActionException: ch.qos.logback.core.util.DynamicClassLoadingException: Failed to instantiate type com.splunk.logging.HttpEventCollectorLogbackAppender
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.joran.action.AppenderAction.begin(AppenderAction.java:76)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.joran.spi.Interpreter.callBeginAction(Interpreter.java:269)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.joran.spi.Interpreter.startElement(Interpreter.java:145)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.joran.spi.Interpreter.startElement(Interpreter.java:128)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.joran.spi.EventPlayer.play(EventPlayer.java:50)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.joran.GenericConfigurator.doConfigure(GenericConfigurator.java:165)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.joran.GenericConfigurator.doConfigure(GenericConfigurator.java:152)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.joran.GenericConfigurator.doConfigure(GenericConfigurator.java:110)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.joran.GenericConfigurator.doConfigure(GenericConfigurator.java:53)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.classic.util.ContextInitializer.configureByResource(ContextInitializer.java:64)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.classic.util.ContextInitializer.autoConfig(ContextInitializer.java:134)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at org.slf4j.impl.StaticLoggerBinder.init(StaticLoggerBinder.java:84)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at org.slf4j.impl.StaticLoggerBinder.<clinit>(StaticLoggerBinder.java:55)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at org.slf4j.LoggerFactory.bind(LoggerFactory.java:150)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at org.slf4j.LoggerFactory.performInitialization(LoggerFactory.java:124)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at org.slf4j.LoggerFactory.getILoggerFactory(LoggerFactory.java:417)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at org.slf4j.LoggerFactory.getLogger(LoggerFactory.java:362)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at com.inductiveautomation.ignition.common.util.LoggerEx$Builder.build(LoggerEx.java:624)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at com.inductiveautomation.ignition.gateway.IgnitionGateway.getLogger(IgnitionGateway.java:3699)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at com.inductiveautomation.ignition.gateway.IgnitionGateway.<init>(IgnitionGateway.java:369)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at com.inductiveautomation.ignition.gateway.IgnitionGateway.main(IgnitionGateway.java:304)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at com.inductiveautomation.catapult.Catapult.main(Catapult.java:8)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at java.base/java.lang.reflect.Method.invoke(Unknown Source)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at org.tanukisoftware.wrapper.WrapperSimpleApp.run(WrapperSimpleApp.java:349)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at java.base/java.lang.Thread.run(Unknown Source)
INFO   | jvm 1    | 2024/02/06 06:31:40 | Caused by: ch.qos.logback.core.util.DynamicClassLoadingException: Failed to instantiate type com.splunk.logging.HttpEventCollectorLogbackAppender
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.util.OptionHelper.instantiateByClassNameAndParameter(OptionHelper.java:68)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.util.OptionHelper.instantiateByClassName(OptionHelper.java:44)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.util.OptionHelper.instantiateByClassName(OptionHelper.java:33)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.joran.action.AppenderAction.begin(AppenderAction.java:52)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	... 27 common frames omitted
INFO   | jvm 1    | 2024/02/06 06:31:40 | Caused by: java.lang.ClassNotFoundException: com.splunk.logging.HttpEventCollectorLogbackAppender
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at java.base/jdk.internal.loader.BuiltinClassLoader.loadClass(Unknown Source)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at java.base/jdk.internal.loader.ClassLoaders$AppClassLoader.loadClass(Unknown Source)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at java.base/java.lang.ClassLoader.loadClass(Unknown Source)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	at ch.qos.logback.core.util.OptionHelper.instantiateByClassNameAndParameter(OptionHelper.java:55)
INFO   | jvm 1    | 2024/02/06 06:31:40 | 	at 	... 30 common frames omitted

Let me know if you need any further information

pturmel · February 6, 2024, 4:59pm

Caused by: java.lang.ClassNotFoundException: com.splunk.logging.HttpEventCollectorLogbackAppender

The gateway did not even find your jar. Where exactly did you put it?

Julio_Guagnelli · February 6, 2024, 5:08pm

I placed it first in C:\Program Files\Inductive Automation\Ignition\lib\core\gateway

But the gateway wouldn't start. Now I have it in C:\Program Files\Inductive Automation\Ignition\lib

pturmel · February 6, 2024, 5:09pm

Put it back in lib/core/gateway. Collect the latest wrapper log to see why it doesn't start.

Julio_Guagnelli · February 6, 2024, 5:26pm

This is the error when in lib/core/gateway:

STATUS | wrapper  | 2024/02/06 12:25:00 | --> Wrapper Started as Service
STATUS | wrapper  | 2024/02/06 12:25:00 | Java Service Wrapper Standard Edition 64-bit 3.5.42
STATUS | wrapper  | 2024/02/06 12:25:00 |   Copyright (C) 1999-2020 Tanuki Software, Ltd. All Rights Reserved.
STATUS | wrapper  | 2024/02/06 12:25:00 |     http://wrapper.tanukisoftware.com
STATUS | wrapper  | 2024/02/06 12:25:00 |   Licensed to Inductive Automation for Inductive Automation
STATUS | wrapper  | 2024/02/06 12:25:00 | 
STATUS | wrapper  | 2024/02/06 12:25:01 | Launching a JVM...
INFO   | jvm 1    | 2024/02/06 12:25:01 | WrapperManager: Initializing...
INFO   | jvm 1    | 2024/02/06 12:25:02 | 12:25:01,992 |-INFO in ch.qos.logback.classic.LoggerContext[default] - Found resource [data\\logback.xml] at [file:/C:/Program%20Files/Inductive%20Automation/Ignition/data/logback.xml]
INFO   | jvm 1    | 2024/02/06 12:25:02 | 12:25:02,046 |-INFO in ch.qos.logback.core.joran.action.AppenderAction - About to instantiate appender of type [ch.qos.logback.core.ConsoleAppender]
INFO   | jvm 1    | 2024/02/06 12:25:02 | 12:25:02,048 |-INFO in ch.qos.logback.core.joran.action.AppenderAction - Naming appender as [SysoutAppender]
INFO   | jvm 1    | 2024/02/06 12:25:02 | 12:25:02,053 |-INFO in ch.qos.logback.core.joran.action.NestedComplexPropertyIA - Assuming default type [ch.qos.logback.classic.encoder.PatternLayoutEncoder] for [encoder] property
INFO   | jvm 1    | 2024/02/06 12:25:02 | 12:25:02,067 |-INFO in ch.qos.logback.core.joran.action.AppenderAction - About to instantiate appender of type [com.inductiveautomation.logging.SQLiteAppender]
INFO   | jvm 1    | 2024/02/06 12:25:02 | 12:25:02,072 |-INFO in ch.qos.logback.core.joran.action.AppenderAction - Naming appender as [DB]
INFO   | jvm 1    | 2024/02/06 12:25:02 | 12:25:02,278 |-INFO in ch.qos.logback.core.db.DataSourceConnectionSource@5792f4a9 - Driver name=SQLite JDBC
INFO   | jvm 1    | 2024/02/06 12:25:02 | 12:25:02,278 |-INFO in ch.qos.logback.core.db.DataSourceConnectionSource@5792f4a9 - Driver version=3.41.2.2
INFO   | jvm 1    | 2024/02/06 12:25:02 | 12:25:02,278 |-INFO in ch.qos.logback.core.db.DataSourceConnectionSource@5792f4a9 - supportsGetGeneratedKeys=true
INFO   | jvm 1    | 2024/02/06 12:25:02 | 12:25:02,285 |-INFO in ch.qos.logback.core.joran.action.AppenderAction - About to instantiate appender of type [ch.qos.logback.classic.AsyncAppender]
INFO   | jvm 1    | 2024/02/06 12:25:02 | 12:25:02,287 |-INFO in ch.qos.logback.core.joran.action.AppenderAction - Naming appender as [SysoutAsync]
INFO   | jvm 1    | 2024/02/06 12:25:02 | 12:25:02,287 |-INFO in ch.qos.logback.core.joran.action.AppenderRefAction - Attaching appender named [SysoutAppender] to ch.qos.logback.classic.AsyncAppender[SysoutAsync]
INFO   | jvm 1    | 2024/02/06 12:25:02 | 12:25:02,287 |-INFO in ch.qos.logback.classic.AsyncAppender[SysoutAsync] - Attaching appender named [SysoutAppender] to AsyncAppender.
INFO   | jvm 1    | 2024/02/06 12:25:02 | 12:25:02,287 |-INFO in ch.qos.logback.classic.AsyncAppender[SysoutAsync] - Setting discardingThreshold to 51
INFO   | jvm 1    | 2024/02/06 12:25:02 | 12:25:02,288 |-INFO in ch.qos.logback.core.joran.action.AppenderAction - About to instantiate appender of type [ch.qos.logback.classic.AsyncAppender]
INFO   | jvm 1    | 2024/02/06 12:25:02 | 12:25:02,288 |-INFO in ch.qos.logback.core.joran.action.AppenderAction - Naming appender as [DBAsync]
INFO   | jvm 1    | 2024/02/06 12:25:02 | 12:25:02,288 |-INFO in ch.qos.logback.core.joran.action.AppenderRefAction - Attaching appender named [DB] to ch.qos.logback.classic.AsyncAppender[DBAsync]
INFO   | jvm 1    | 2024/02/06 12:25:02 | 12:25:02,288 |-INFO in ch.qos.logback.classic.AsyncAppender[DBAsync] - Attaching appender named [DB] to AsyncAppender.
INFO   | jvm 1    | 2024/02/06 12:25:02 | 12:25:02,288 |-INFO in ch.qos.logback.classic.AsyncAppender[DBAsync] - Setting discardingThreshold to 51
INFO   | jvm 1    | 2024/02/06 12:25:02 | 12:25:02,288 |-INFO in ch.qos.logback.core.joran.action.AppenderAction - About to instantiate appender of type [com.splunk.logging.HttpEventCollectorLogbackAppender]
INFO   | jvm 1    | 2024/02/06 12:25:02 | 12:25:02,292 |-INFO in ch.qos.logback.core.joran.action.AppenderAction - Naming appender as [SPLUNK]
INFO   | jvm 1    | 2024/02/06 12:25:02 | Failed to instantiate SLF4J LoggerFactory
INFO   | jvm 1    | 2024/02/06 12:25:02 | Reported exception:
INFO   | jvm 1    | 2024/02/06 12:25:02 | java.lang.NoClassDefFoundError: okhttp3/Callback
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at com.splunk.logging.HttpEventCollectorLogbackAppender.start(HttpEventCollectorLogbackAppender.java:95)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at ch.qos.logback.core.joran.action.AppenderAction.end(AppenderAction.java:90)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at ch.qos.logback.core.joran.spi.Interpreter.callEndAction(Interpreter.java:309)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at ch.qos.logback.core.joran.spi.Interpreter.endElement(Interpreter.java:193)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at ch.qos.logback.core.joran.spi.Interpreter.endElement(Interpreter.java:179)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at ch.qos.logback.core.joran.spi.EventPlayer.play(EventPlayer.java:62)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at ch.qos.logback.core.joran.GenericConfigurator.doConfigure(GenericConfigurator.java:165)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at ch.qos.logback.core.joran.GenericConfigurator.doConfigure(GenericConfigurator.java:152)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at ch.qos.logback.core.joran.GenericConfigurator.doConfigure(GenericConfigurator.java:110)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at ch.qos.logback.core.joran.GenericConfigurator.doConfigure(GenericConfigurator.java:53)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at ch.qos.logback.classic.util.ContextInitializer.configureByResource(ContextInitializer.java:64)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at ch.qos.logback.classic.util.ContextInitializer.autoConfig(ContextInitializer.java:134)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at org.slf4j.impl.StaticLoggerBinder.init(StaticLoggerBinder.java:84)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at org.slf4j.impl.StaticLoggerBinder.<clinit>(StaticLoggerBinder.java:55)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at org.slf4j.LoggerFactory.bind(LoggerFactory.java:150)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at org.slf4j.LoggerFactory.performInitialization(LoggerFactory.java:124)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at org.slf4j.LoggerFactory.getILoggerFactory(LoggerFactory.java:417)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at org.slf4j.LoggerFactory.getLogger(LoggerFactory.java:362)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at com.inductiveautomation.ignition.common.util.LoggerEx$Builder.build(LoggerEx.java:624)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at com.inductiveautomation.ignition.gateway.IgnitionGateway.getLogger(IgnitionGateway.java:3699)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at com.inductiveautomation.ignition.gateway.IgnitionGateway.<init>(IgnitionGateway.java:369)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at com.inductiveautomation.ignition.gateway.IgnitionGateway.main(IgnitionGateway.java:304)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at com.inductiveautomation.catapult.Catapult.main(Catapult.java:8)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at java.base/java.lang.reflect.Method.invoke(Unknown Source)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at org.tanukisoftware.wrapper.WrapperSimpleApp.run(WrapperSimpleApp.java:349)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at java.base/java.lang.Thread.run(Unknown Source)
INFO   | jvm 1    | 2024/02/06 12:25:02 | Caused by: java.lang.ClassNotFoundException: okhttp3.Callback
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at java.base/jdk.internal.loader.BuiltinClassLoader.loadClass(Unknown Source)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at java.base/jdk.internal.loader.ClassLoaders$AppClassLoader.loadClass(Unknown Source)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	at java.base/java.lang.ClassLoader.loadClass(Unknown Source)
INFO   | jvm 1    | 2024/02/06 12:25:02 | 	... 29 more
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp: 
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: Encountered an error running main:
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: java.lang.NoClassDefFoundError: okhttp3/Callback
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at com.splunk.logging.HttpEventCollectorLogbackAppender.start(HttpEventCollectorLogbackAppender.java:95)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at ch.qos.logback.core.joran.action.AppenderAction.end(AppenderAction.java:90)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at ch.qos.logback.core.joran.spi.Interpreter.callEndAction(Interpreter.java:309)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at ch.qos.logback.core.joran.spi.Interpreter.endElement(Interpreter.java:193)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at ch.qos.logback.core.joran.spi.Interpreter.endElement(Interpreter.java:179)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at ch.qos.logback.core.joran.spi.EventPlayer.play(EventPlayer.java:62)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at ch.qos.logback.core.joran.GenericConfigurator.doConfigure(GenericConfigurator.java:165)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at ch.qos.logback.core.joran.GenericConfigurator.doConfigure(GenericConfigurator.java:152)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at ch.qos.logback.core.joran.GenericConfigurator.doConfigure(GenericConfigurator.java:110)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at ch.qos.logback.core.joran.GenericConfigurator.doConfigure(GenericConfigurator.java:53)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at ch.qos.logback.classic.util.ContextInitializer.configureByResource(ContextInitializer.java:64)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at ch.qos.logback.classic.util.ContextInitializer.autoConfig(ContextInitializer.java:134)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at org.slf4j.impl.StaticLoggerBinder.init(StaticLoggerBinder.java:84)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at org.slf4j.impl.StaticLoggerBinder.<clinit>(StaticLoggerBinder.java:55)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at org.slf4j.LoggerFactory.bind(LoggerFactory.java:150)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at org.slf4j.LoggerFactory.performInitialization(LoggerFactory.java:124)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at org.slf4j.LoggerFactory.getILoggerFactory(LoggerFactory.java:417)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at org.slf4j.LoggerFactory.getLogger(LoggerFactory.java:362)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at com.inductiveautomation.ignition.common.util.LoggerEx$Builder.build(LoggerEx.java:624)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at com.inductiveautomation.ignition.gateway.IgnitionGateway.getLogger(IgnitionGateway.java:3699)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at com.inductiveautomation.ignition.gateway.IgnitionGateway.<init>(IgnitionGateway.java:369)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at com.inductiveautomation.ignition.gateway.IgnitionGateway.main(IgnitionGateway.java:304)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at com.inductiveautomation.catapult.Catapult.main(Catapult.java:8)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at java.base/java.lang.reflect.Method.invoke(Unknown Source)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at org.tanukisoftware.wrapper.WrapperSimpleApp.run(WrapperSimpleApp.java:349)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at java.base/java.lang.Thread.run(Unknown Source)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: Caused by: java.lang.ClassNotFoundException: okhttp3.Callback
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at java.base/jdk.internal.loader.BuiltinClassLoader.loadClass(Unknown Source)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at java.base/jdk.internal.loader.ClassLoaders$AppClassLoader.loadClass(Unknown Source)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	at java.base/java.lang.ClassLoader.loadClass(Unknown Source)
INFO   | jvm 1    | 2024/02/06 12:25:02 | WrapperSimpleApp Error: 	... 29 more
STATUS | wrapper  | 2024/02/06 12:25:04 | <-- Wrapper Stopped

pturmel · February 6, 2024, 5:32pm

java.lang.NoClassDefFoundError: okhttp3/Callback

Looks like a missing dependency. You need to study splunk's java install requirements.

Julio_Guagnelli · February 6, 2024, 6:05pm

So , these are the dependencies in splunk documentation

And Ignition has them all.

pturmel · February 6, 2024, 6:06pm

Show your logback.xml file.

Julio_Guagnelli · February 6, 2024, 6:10pm

logback.xml:

<?xml version="1.0" encoding="UTF-8"?>

<!-- For assistance related to logback-translator or configuration  -->
<!-- files in general, please contact the logback user mailing list -->
<!-- at http://www.qos.ch/mailman/listinfo/logback-user             -->
<!--                                                                -->
<!-- For professional support please see                            -->
<!--    http://www.qos.ch/shop/products/professionalSupport         -->
<!--                                                                -->
<configuration debug="true">

  
  <appender name="SysoutAppender" class="ch.qos.logback.core.ConsoleAppender">
    <encoder>
      <pattern>%.-1p [%-30c{1}] [%d{HH:mm:ss,SSS}]: %m %X%n</pattern>
    </encoder>
  </appender>
  <appender name="DB" class="com.inductiveautomation.logging.SQLiteAppender">
    <dir>logs</dir>
    <!--
      Maintenance Settings
      entryLimit: The maximum number of entries in the database. However, at any given time, there may be more than this number, due to how cleanup works.
      maxEventsPerMaintenance: The number of event that can happen before a maintenance cycle occurs.
      minTimeBetweenMaintenance: The minimum time (max frequency) between maintenance events. Takes precedent over max events.
      vacuumFrequency: The number of maintenance cycles before a "vacuum" is performed, to recover disk space.
      diskspaceCleanupEventCount: The number of oldest events that will be removed when max database size is exceeded.
      maxDatabaseSize: Database size in bytes, above which will trigger a maintenance cycle to remove diskspaceCleanupEventCount of oldest events.

      On disk, most log events are between 600-800 bytes.
    <entryLimit>50000</entryLimit>
    <maxEventsPerMaintenance>5000</maxEventsPerMaintenance>
    <minTimeBetweenMaintenance>60000</minTimeBetweenMaintenance>
    <vacuumFrequency>3</vacuumFrequency>
    <diskspaceCleanupEventCount>500</diskspaceCleanupEventCount>
    <maxDatabaseSize>104857600</maxDatabaseSize>
    -->
  </appender>
  <appender name="SysoutAsync" class="ch.qos.logback.classic.AsyncAppender" queueSize="1000" discardingThreshold="0">
    <appender-ref ref="SysoutAppender" />
  </appender>
  <appender name="DBAsync" class="ch.qos.logback.classic.AsyncAppender" queueSize="100000" discardingThreshold="0">
    <appender-ref ref="DB" />
  </appender>
  
  <appender name="SPLUNK" class="com.splunk.logging.HttpEventCollectorLogbackAppender">
    <url>https://localhost:8188</url>
    <token>54443b08-3baf-42f8-b588-ff2a7b3ed50e</token>
    <index>main</index>
    <disableCertificateValidation>true</disableCertificateValidation>
    <layout class="ch.qos.logback.classic.PatternLayout">
      <pattern>%msg</pattern>
    </layout>
  </appender>

  <root level="INFO">
    <appender-ref ref="SysoutAsync"/>
    <appender-ref ref="DBAsync"/>
  </root>
</configuration>

pturmel · February 6, 2024, 6:28pm

Hmmm. No obvious problem to my eyes.

Everything points to a dependency on OkHttp.