All Apps and Add-ons

Has anyone tried a connection with mongoDB v3 authentication SCRAM-SHA-1 enabled from Hunk? Is this supported?

ashish_ray
New Member

Has anyone tried a connection with mongoDB v3 authentication SCRAM-SHA-1 enabled from Hunk?

I am getting error using following indexes.conf:

[provider:local-mongodb]
vix.mongodb.host = ma1.splunktest.com:27017
vix.output.buckets.max.network.bandwidth = 0
vix.description = Test MongoDB with Hunk
vix.mongodb.auth.mechanism = SCRAM-SHA-1
vix.mongodb.auth.password = north123$
vix.mongodb.auth.username = northuser

Splunk query shows following error:

 07-22-2015 00:06:32.152 ERROR ERP.local-mongodb -  MongoDBERP - Exception while executing search process.
 07-22-2015 00:06:32.152 ERROR ERP.local-mongodb -  com.mongodb.MongoException: not authorized for query on Northwind.products
 07-22-2015 00:06:32.152 ERROR ERP.local-mongodb -      at com.mongodb.QueryResultIterator.throwOnQueryFailure(QueryResultIterator.java:214)
0 Karma

sandeepkumar23
Explorer

Any update on this Hunk App for MongoDB supports 'SCRAM-SHA-1' auth...?

0 Karma

ashish_ray
New Member

does anyone able to connect with mongoDB with auth enabled in Hunk App for MongoDB?
Please provide a working configuration that works with any type of authentication. I have tried various combinations with no luck:(

Thanks

0 Karma

rdagan_splunk
Splunk Employee
Splunk Employee

The MongoDB App allows to specify 4 types of authentication mechanism, namely Plain, Kerberos, CR(Challenge–Response) and X509
After you install the App, click on the App main page inside the Hunk UI to see the detail documentation for these options.

0 Karma

ashish_ray
New Member

I am aware of the supported 4 types of authentication , I tried type "CR" and "SCRAM-SHA-1" that is replaced in MongoDB ver-3 for CR type. None of them is working.

Splunk ver - 6.2

indexes.conf: (this goes in .../app/local/MongoDbApp/indexes.conf)

[provider:local-mongodb]
vix.mongodb.host = splunkt-lin.corp.apple.com:27017
vix.output.buckets.max.network.bandwidth = 0
vix.description = Test MongoDB with Hunk
vix.mongodb.auth.mechanism = CR
vix.mongodb.auth.password = north123$
vix.mongodb.auth.username = northuser

This one goes to .../apps/search/local/indexes.com

[northwind_customers]
vix.description = MongoDB Northwind - Customers
vix.input.1.path = /tmp
vix.mongodb.collection = customers
vix.mongodb.db = Northwind
vix.mongodb.field.time = _id
vix.mongodb.field.time.format = ObjectId
vix.provider = local-mongodb
disabled = 0

[northwind_products]
vix.description = with Auth enabled
vix.input.1.path = /tmp
vix.mongodb.collection = products
vix.mongodb.db = Northwind
vix.mongodb.field.time = _id
vix.mongodb.field.time.format = ObjectId
vix.provider = local-mongodb
disabled = 0

0 Karma

gibu_george
Engager

any updates on this? I'm also stuck with the same issue

0 Karma

ashish_ray
New Member

Same credential works with DB-Connect using Mongo-JDBC Drive. It seems that this is not a MongoDB side authentication issue?

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...