topic When deploying the REST API Modular Input add-on, it kills Splunk DB Connect process. Is there a workaround? in All Apps and Add-ons

When deploying the REST API Modular Input add-on, it kills Splunk DB Connect process. Is there a workaround?

stanwin — Fri, 17 Feb 2017 11:17:14 GMT

Hello

While deploying the REST API Modular Input add-on to our search head cluster, Splunk DB Connect ends up getting killed, or part of it does.

Any direct DBquery works but all scheduled DBX ingestion stops i.e. DBMON tail /dump etc

They were just not scheduled as observed in the DBX logs.

The issue of it not showing up in the GUI is there as well but we can workaround that, but DBX affected by the modular input bugs?

Below answer reports the bug of DBX though not for this issue:

https://answers.splunk.com/answers/111023/unable-to-initialize-modular-input-rest-defined-inside-the-app-rest-ta.html

There is a known bug with Splunk 6
that is caused by the DB Connect App.

If you have this app installed , it
causes all other Modular Inputs to not
show up on the Manager->Data Inputs
page

Although the Modular Inputs are
installed and working fine and can
still be navigated to manually :
Wondering if anyone has had this issue & if there is any workaround?

Re: When deploying the REST API Modular Input add-on, it kills Splunk DB Connect process. Is there a workaround?

jcoates_splunk — Tue, 21 Feb 2017 01:28:38 GMT

hi, that's a known issue in the end-of-lifed DB Connect v1; you'd need to stay on an older Splunk platform to work around it, or try the newest version instead. http://blogs.splunk.com/2017/02/20/splunk-db-connect-3-released/

Re: When deploying the REST API Modular Input add-on, it kills Splunk DB Connect process. Is there a workaround?

stanwin — Thu, 23 Feb 2017 15:49:33 GMT

Right, thanks jcoates!