https://community.splunk.com/t5/Splunk-Enterprise/search-head-cluster-after-splunk-db-connect-ver-3-1-1-Error/m-p/375987#M7796 <P>hello there,</P> <P>please read the doc in detail:<BR /> <A href="http://docs.splunk.com/Documentation/DBX/3.1.3/DeployDBX/Architectureandperformanceconsiderations">http://docs.splunk.com/Documentation/DBX/3.1.3/DeployDBX/Architectureandperformanceconsiderations</A></P> <PRE><CODE>To use Splunk DB Connect in a distributed search environment, including search head clusters, you must determine the planned use cases. For ad hoc, interactive usage of database connections by live users, install the app on search head(s). For scheduled indexing from databases and output of data to databases, install the app on heavy forwarder(s). </CODE></PRE> <P>avoid installing DB Connect as an input (data collection) mechanism in a Search Head Cluster. keep it on a single Splunk instance only, preferably a Heavy Forwarder.</P> <P>hope it helps</P> Tue, 08 May 2018 01:35:06 GMT adonio 2018-05-08T01:35:06Z https://community.splunk.com/t5/Splunk-Enterprise/search-head-cluster-after-splunk-db-connect-ver-3-1-1-Error/m-p/375986#M7795 <P>hi <BR /> I installed it by the method presented from the link below.<BR /> <A href="http://docs.splunk.com/Documentation/DBX/3.1.1/DeployDBX/Distributeddeployment" target="_blank">http://docs.splunk.com/Documentation/DBX/3.1.1/DeployDBX/Distributeddeployment</A></P> <P>The following error occurs.<BR /> " Unable to initialize modular input "server" defined inside the app "splunk_app_db_connect": Introspecting scheme=server: Unable to run "/opt/splunk/etc/apps/splunk_app_db_connect/linux_x86_64/bin/server.sh --scheme": child failed to start: Permission denied "</P> <P>I set only identities and connections, mysql JDBC drivers</P> <P>What should I do?</P> Tue, 29 Sep 2020 19:22:27 GMT https://community.splunk.com/t5/Splunk-Enterprise/search-head-cluster-after-splunk-db-connect-ver-3-1-1-Error/m-p/375986#M7795 spl109 2020-09-29T19:22:27Z https://community.splunk.com/t5/Splunk-Enterprise/search-head-cluster-after-splunk-db-connect-ver-3-1-1-Error/m-p/375987#M7796 <P>hello there,</P> <P>please read the doc in detail:<BR /> <A href="http://docs.splunk.com/Documentation/DBX/3.1.3/DeployDBX/Architectureandperformanceconsiderations">http://docs.splunk.com/Documentation/DBX/3.1.3/DeployDBX/Architectureandperformanceconsiderations</A></P> <PRE><CODE>To use Splunk DB Connect in a distributed search environment, including search head clusters, you must determine the planned use cases. For ad hoc, interactive usage of database connections by live users, install the app on search head(s). For scheduled indexing from databases and output of data to databases, install the app on heavy forwarder(s). </CODE></PRE> <P>avoid installing DB Connect as an input (data collection) mechanism in a Search Head Cluster. keep it on a single Splunk instance only, preferably a Heavy Forwarder.</P> <P>hope it helps</P> Tue, 08 May 2018 01:35:06 GMT https://community.splunk.com/t5/Splunk-Enterprise/search-head-cluster-after-splunk-db-connect-ver-3-1-1-Error/m-p/375987#M7796 adonio 2018-05-08T01:35:06Z https://community.splunk.com/t5/Splunk-Enterprise/search-head-cluster-after-splunk-db-connect-ver-3-1-1-Error/m-p/375988#M7797 <P>Thank you. <BR /> SHC tries to install to use the |dbxout command.</P> <P>Is there no way to resolve the error? The splunk version is 6.6.3</P> Wed, 09 May 2018 22:14:16 GMT https://community.splunk.com/t5/Splunk-Enterprise/search-head-cluster-after-splunk-db-connect-ver-3-1-1-Error/m-p/375988#M7797 spl109 2018-05-09T22:14:16Z https://community.splunk.com/t5/Splunk-Enterprise/search-head-cluster-after-splunk-db-connect-ver-3-1-1-Error/m-p/375989#M7798 <P>mine is on a heavy forwarder. this just started happening</P> <P>Unable to initialize modular input "server" defined inside the app "splunk_app_db_connect": Introspecting scheme=server: Unable to run "/opt/splunk/etc/apps/splunk_app_db_connect/linux_x86_64/bin/server.sh --scheme": child failed to start: Permission denied </P> Tue, 29 Sep 2020 21:56:32 GMT https://community.splunk.com/t5/Splunk-Enterprise/search-head-cluster-after-splunk-db-connect-ver-3-1-1-Error/m-p/375989#M7798 jaxjohnny2000 2020-09-29T21:56:32Z https://community.splunk.com/t5/Splunk-Enterprise/search-head-cluster-after-splunk-db-connect-ver-3-1-1-Error/m-p/375990#M7799 <P>My answer was to change the permissions on the server.sh file to make it and executable.</P> <P>chmod 777 server.sh</P> Wed, 07 Nov 2018 20:49:43 GMT https://community.splunk.com/t5/Splunk-Enterprise/search-head-cluster-after-splunk-db-connect-ver-3-1-1-Error/m-p/375990#M7799 jaxjohnny2000 2018-11-07T20:49:43Z