topic Re: Splunk DBX and Oracle TCPS connection - Getting error in All Apps and Add-ons

Splunk DBX and Oracle TCPS connection - Getting error

vijayakumarkb — Wed, 30 Sep 2020 04:39:06 GMT

Hi
I was trying to connect to my oracle db using TCPS. but getting below error
IO Error: Received fatal alert: handshake_failure, connect lapse 68 ms., Authentication lapse 0 ms.

steps i did.
in connection, enabled SSl checkbox
1. in java 1.8/ cacerts - imported the corporate root certificates.[ this works for sqlDeveloper and connecting from java]
2. since it didnt worked adde the root certificates to truststore and keystore in /etc/apps/splunk_app_db_connect/certs
this also didnt worked.
3. added ojdbc8.jar into driver folder

But still it is giving me error, other TCP connections are working fine.

Kindly help

Re: Splunk DBX and Oracle TCPS connection - Getting error

vijayakumarkb — Tue, 17 Mar 2020 10:50:00 GMT

using version splunkdbx 3

Re: Splunk DBX and Oracle TCPS connection - Getting error

harsmarvania57 — Tue, 17 Mar 2020 11:41:35 GMT

Hi,

Based on https://docs.splunk.com/Documentation/DBX/3.3.0/DeployDBX/Installdatabasedrivers , you need to use correct JDBC driver, for example: For Oracle 12c - ojdbc7.jar driver is supported with JDK8

Re: Splunk DBX and Oracle TCPS connection - Getting error

vijayakumarkb — Tue, 17 Mar 2020 12:16:23 GMT

I use Oracle DB version 12.2 and OJDBC jar 8, tried with 7 also.

Re: Splunk DBX and Oracle TCPS connection - Getting error

harsmarvania57 — Tue, 17 Mar 2020 12:28:58 GMT

Try this troubleshooting steps https://docs.splunk.com/Documentation/DBX/3.2.0/DeployDBX/Troubleshooting#Cannot_connect_to_Oracle_SQL_Server

Re: Splunk DBX and Oracle TCPS connection - Getting error

vijayakumarkb — Wed, 18 Mar 2020 04:18:33 GMT

Thanks, i did that, but where can we see the ORA errors.
i don't see them in the logs

Re: Splunk DBX and Oracle TCPS connection - Getting error

hatalla — Wed, 30 Sep 2020 05:31:50 GMT

Hi Vijayakumarkb,

I wonder if you were able to resolve this because I cam getting the exact same error. things I did:

Used ojdbc8.jar (v 12.2)
Imported the cert pem in both the Java store as well as the DB Connect trustore in /opt/splunk/etc/apps/splunk_app_db_connect/certs/

Running curl as in

curl --cacert /tmp/certname.pem -v https://hostname:portnumber

is successful however in DB connect under connection I am getting: "IO Error: Received fatal alert: handshake_failure, connect lapse 1 ms., Authentication lapse 0 m"

I am using DB Connect v 3.1.4 + Java v 1.8.0

Thanks