All Apps and Add-ons

DB connect data Input not working in splunk. Please help.

saikatr
Path Finder

We have a database data input which has stopped pulling data from an oracle database over the last 7-8 hours. I have tried disabling and re enabling the data inputs to no effect. i have also gone to manage apps> splunk DB connect>view objects and disabled and re enabled the object related to that database but no luck there either.

Then i tried to restart the splunk services on the indexers, one of them started fine but the other one keeps going into upgrade setup every time we try to start or stop it (it mistakes the start/stop for upgrade request, I presume).

  1. Has anyone faced this forced upgrade issue before? How to troubleshoot it?
  2. Do you think the two issues are related? Will restarting services on the indexer solve the first issue?
0 Karma

jcoates_splunk
Splunk Employee
Splunk Employee

For this sort of urgent issue, it's probably better to call support... I'm not seeing which version of DB Connect or Splunk you're using, which would definitely affect the potential answer.

saikatr
Path Finder

Also we tried to create a diagnosis file on the indexer server, for adding to a splunk.com case I have already raised, but even the diag command is making the upgrade setup open up and we are unable to capture the diag file.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...