All Apps and Add-ons

DB Connect with Splunk 8 and wierd errors

afx
Contributor

Hi,
I am trying to use db connect 3.2.0 with Splunk 8.0.1 on Windows to access a MS SQL DB.
This is a fresh install for using splunk as a heavy forwarder to get log entries from within the DB.

I see various weird things:
The DB Connect Log settings show me all log leves are set to INFO and when I try to change them to DEBUG, it never returns from pressing save. It also does not save the changed logging settings.
When I set the log level in the dbx_logging.conf file and restart splunk, the GUI still shows loglevel INFO.
But there is a splunk_app_db_connect_dbx.log file that shows entries at log level DEBUG.

When I use the GUI to set up the input, I can selct connection/Catalog/Schema and Table but the resulting query always results in

Error in 'dbxquery' command: External search command exited unexpectedly with non-zero error code 255.

Also if I try to manually set up a query.
I find nothing in the logs that correlates with this error.

Any ideas what to try next?

thx
afx

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...