All Apps and Add-ons

Configure DB Connect App Programatically

rfitch
Path Finder

I'd like to add and remove DB Connect configurations programatically. Has anyone tried this? I'm guessing I can just add / remove entries to the db_connections.conf, inputs.conf, and identities.conf.

For the identities.conf, if I put the password in there plain text, will Splunk hash it for me, or is there a way I can do that ahead of time?

0 Karma

jcoates_splunk
Splunk Employee
Splunk Employee

I'd advise using DB Connect 3 if you're going to use automatic configuration. The different types of inputs are separated into different files, rising column checkpoints are separated into a different location, and SQL parsing is strictly WYSIWYG. One gotcha in 3.0.0 is that you've got to "seed" the rising column file in your script.

0 Karma

rfitch
Path Finder

Found the answer, credentials can be added using curl.

https://docs.splunk.com/Documentation/DBX/2.4.0/DeployDBX/javaspec

0 Karma

sloshburch
Ultra Champion

Alternatively, I wonder if there's a REST api that you can use for generating the new connection. That's because typically conf file updates require a restart of splunkd while REST calls often do not.

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security: Your Command Center for PCI DSS Compliance

Every security professional knows the drill. The PCI DSS audit is approaching, and suddenly everyone's asking ...

Developer Spotlight with Guilhem Marchand

From Splunk Engineer to Founder: The Journey Behind TrackMe    After spending over 12 years working full time ...

Cisco Catalyst Center Meets Splunk ITSI: From 'Payments Are Down' to Root Cause in ...

The Problem: When Networks and Services Don't Talk Payment systems fail at a retail location. Customers are ...