topic Re: Can we query AWS RDS MSSQL DB tables using Splunk DB Connect 2 in Deployment Architecture

Can we query AWS RDS MSSQL DB tables using Splunk DB Connect 2

pavankumarh — Mon, 18 Jul 2016 13:24:59 GMT

The RDS SQL Instance on the AWS environment is an end point ( egs: mssql2016db.xfd4uv5wrty.us-west-2.rds.amazonaws.com ). we can connect to this instance through SQL Express or SQL Mgmt Studio, using credentials on port 1433. The instructions are here in the link below to do the same.
http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_ConnectToMicrosoftSQLServerInstance.html

When we try to do the same with "Splunk DB Connect-2", we get an "Internal Server Error" or "Operation Timed Out".

The RPC server is up and all the supported drivers are downloaded and available. We can connect to a local SQL DB, but not sure if we are doing anything wrong when connecting to AWS RDS.

http://docs.splunk.com/Documentation/DBX/2.2.0/DeployDBX/Supporteddatabases

Has anyone tried doing this?, if yes please point us to the documentation.

Re: Can we query AWS RDS MSSQL DB tables using Splunk DB Connect 2

kintyreBK — Wed, 03 Jan 2018 21:58:57 GMT

I know this post is older, but we recently successfully did this. Only issue that I can think for you could have been the security group rules between your Splunk instance and the RDS instance.

Re: Can we query AWS RDS MSSQL DB tables using Splunk DB Connect 2

pavankumarh — Thu, 04 Jan 2018 07:31:28 GMT

Hi, Thank you for the answer. Could you please share an example connection configuration that you did. may be a screenshot from dbconnect will help.

Re: Can we query AWS RDS MSSQL DB tables using Splunk DB Connect 2

kintyreBK — Thu, 04 Jan 2018 14:16:16 GMT

There really is nothing special about the connection. Just provide the DNS name of the RDS database in the host field and a valid identity (we used a local SQL Server user, not a domain account). Then, it is just a matter of having your networking and firewall rules right. Use telnet or netcat to confirm network connectivity. Only other idea I would have is version compatibility between the server and the driver.