All Apps and Add-ons

How to configure connection for Splunk ODBC?

Noorzaie
Explorer

I am receiving the following error message:

(60)Unexpected response from server. Verify the server URL. Error parsing JSON: Expect either an object or array at root.

I have windows 7 64 bit but am using Excel 2013 32 bit and have installed 32 bit ODBC. In the configuration I have entered my UserID and Password and the URL for my Splunk source. This is the same information I put into a browser connecting to my Splunk which works fine. I am not using SSL.
Is the ODBC connection information different from the browser interface?

I have tried the following for server URL:

http: //12.123.123.12
http: //12.123.123.12:80
http: //12.123.123.12:8080
https: //12.123.123.12:8089

Appreciate any guidance.

1 Solution

ywu_splunk
Splunk Employee
Splunk Employee

Make sure connecting to the management port (default 8089) rather than the web UI port (default 8000). Use the following page to troubleshoot:
http://docs.splunk.com/Documentation/ODBC/1.0.1/UseODBC/Tablesarentvisibleafterconnecting

View solution in original post

ywu_splunk
Splunk Employee
Splunk Employee

Make sure connecting to the management port (default 8089) rather than the web UI port (default 8000). Use the following page to troubleshoot:
http://docs.splunk.com/Documentation/ODBC/1.0.1/UseODBC/Tablesarentvisibleafterconnecting

Noorzaie
Explorer

Got it working by:

uninstalling both 64 bit and 32 bit drivers

installing 32 bit driver ONLY

Please use the above reference for validating the URL and credentials.

Now comes the hard part, how can I get my WEB queries to run in Excel? Any reference material or examples would be great.

Noorzaie
Explorer

I can get to Splunk Atom Feed: services with the URL and credentials typed in the ODBC configuration.

0 Karma

Noorzaie
Explorer

I am able to connect via the web browser to validate the services URL and authentication. But in ODBC I am still getting this error:

(60) Unexpected response from server. Verify the server URL. Error parsing JSON: Expect either an object or array at root.

Any other thoughts?

0 Karma

Noorzaie
Explorer

thank you "ywu_splunk"!

I will get with our Splunk Admin to validate the URL and credentials. I wish this was documented in the ODBC install documentation for validation 😉

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...