All Apps and Add-ons

How to configure connection for Splunk ODBC?

Noorzaie
Explorer

I am receiving the following error message:

(60)Unexpected response from server. Verify the server URL. Error parsing JSON: Expect either an object or array at root.

I have windows 7 64 bit but am using Excel 2013 32 bit and have installed 32 bit ODBC. In the configuration I have entered my UserID and Password and the URL for my Splunk source. This is the same information I put into a browser connecting to my Splunk which works fine. I am not using SSL.
Is the ODBC connection information different from the browser interface?

I have tried the following for server URL:

http: //12.123.123.12
http: //12.123.123.12:80
http: //12.123.123.12:8080
https: //12.123.123.12:8089

Appreciate any guidance.

1 Solution

ywu_splunk
Splunk Employee
Splunk Employee

Make sure connecting to the management port (default 8089) rather than the web UI port (default 8000). Use the following page to troubleshoot:
http://docs.splunk.com/Documentation/ODBC/1.0.1/UseODBC/Tablesarentvisibleafterconnecting

View solution in original post

ywu_splunk
Splunk Employee
Splunk Employee

Make sure connecting to the management port (default 8089) rather than the web UI port (default 8000). Use the following page to troubleshoot:
http://docs.splunk.com/Documentation/ODBC/1.0.1/UseODBC/Tablesarentvisibleafterconnecting

Noorzaie
Explorer

Got it working by:

uninstalling both 64 bit and 32 bit drivers

installing 32 bit driver ONLY

Please use the above reference for validating the URL and credentials.

Now comes the hard part, how can I get my WEB queries to run in Excel? Any reference material or examples would be great.

Noorzaie
Explorer

I can get to Splunk Atom Feed: services with the URL and credentials typed in the ODBC configuration.

0 Karma

Noorzaie
Explorer

I am able to connect via the web browser to validate the services URL and authentication. But in ODBC I am still getting this error:

(60) Unexpected response from server. Verify the server URL. Error parsing JSON: Expect either an object or array at root.

Any other thoughts?

0 Karma

Noorzaie
Explorer

thank you "ywu_splunk"!

I will get with our Splunk Admin to validate the URL and credentials. I wish this was documented in the ODBC install documentation for validation 😉

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...

Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass

Hello Splunkers,  We’re excited to kick off a Splunk Dashboard contest! We know that dashboards are a primary ...

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...