All Apps and Add-ons

How to configure connection for Splunk ODBC?

Noorzaie
Explorer

I am receiving the following error message:

(60)Unexpected response from server. Verify the server URL. Error parsing JSON: Expect either an object or array at root.

I have windows 7 64 bit but am using Excel 2013 32 bit and have installed 32 bit ODBC. In the configuration I have entered my UserID and Password and the URL for my Splunk source. This is the same information I put into a browser connecting to my Splunk which works fine. I am not using SSL.
Is the ODBC connection information different from the browser interface?

I have tried the following for server URL:

http: //12.123.123.12
http: //12.123.123.12:80
http: //12.123.123.12:8080
https: //12.123.123.12:8089

Appreciate any guidance.

1 Solution

ywu_splunk
Splunk Employee
Splunk Employee

Make sure connecting to the management port (default 8089) rather than the web UI port (default 8000). Use the following page to troubleshoot:
http://docs.splunk.com/Documentation/ODBC/1.0.1/UseODBC/Tablesarentvisibleafterconnecting

View solution in original post

ywu_splunk
Splunk Employee
Splunk Employee

Make sure connecting to the management port (default 8089) rather than the web UI port (default 8000). Use the following page to troubleshoot:
http://docs.splunk.com/Documentation/ODBC/1.0.1/UseODBC/Tablesarentvisibleafterconnecting

Noorzaie
Explorer

Got it working by:

uninstalling both 64 bit and 32 bit drivers

installing 32 bit driver ONLY

Please use the above reference for validating the URL and credentials.

Now comes the hard part, how can I get my WEB queries to run in Excel? Any reference material or examples would be great.

Noorzaie
Explorer

I can get to Splunk Atom Feed: services with the URL and credentials typed in the ODBC configuration.

0 Karma

Noorzaie
Explorer

I am able to connect via the web browser to validate the services URL and authentication. But in ODBC I am still getting this error:

(60) Unexpected response from server. Verify the server URL. Error parsing JSON: Expect either an object or array at root.

Any other thoughts?

0 Karma

Noorzaie
Explorer

thank you "ywu_splunk"!

I will get with our Splunk Admin to validate the URL and credentials. I wish this was documented in the ODBC install documentation for validation 😉

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...