Dbconnect with windows based SQL Server

[k31453]

I am attempting to ingest data from Windows based SQL Server from Dbconnect on linux HF.

We are not allowed to use jtdc driver since it is not SSL encrypted. What is the alternative to connect to windows based database?

I believe i might have to create service account for the machine that is hosting sql server. but do i need anything else? I have allowed port no to the sql server host.

Database can access through RDPing into instance --> SQL Mangement Studio

Edit:

• Created service account and added Database read-only AD group
• Create Identity with Service account for username , password with Use Windows Authentication Domain - CHECKED and added domain

Dbconnect connection configs:
- Have added hostname: fqdn\SQL1 , port 51565 ( firewall rules have been added)
- Added default database name
- Attempted to create connection for Microsoft Generic Driver (4.2 version) - having issue:

 Login failed for user 'xxxxx'. ClientConnectionId:xxxxxxxxxxxxxxxx

[jrballesteros05 · Accepted solution]

Hello.

I assume you want to get events from any table different to audit events from SQL Server.

Is there a problem if you download official JDBC driver from https://msdn.microsoft.com/en-us/sqlserver/aa937724.aspx instead of JTDC? Because this one does support SSL.

If you cannot, you can tell the DBA to create an store procedure or script that wrote the output in disk and I could read by Universal Forwarder.

I never used but I think you can use powershell to query Databases. If so you can use an input script.

[k31453]

Well my workplace do require SSL encyrption and only driver who provide ssl encyrption is JDBC. So I have to use it.

[jrballesteros05]

Hello. Information related about JDBC drivers:

https://docs.splunk.com/Documentation/DBX/latest/DeployDBX/Installdatabasedrivers#Supported_database...