All Apps and Add-ons

Is it possible to connect Splunk DB Connect 2 works with an Azure SQL Database?

rubeniturrieta
Communicator

Hi guys,

I'm trying to connect Splunk DB Connect 2 with a SQL Azure database. Should this work? Are there any special considerations?

Any help will be grateful

Thank you

0 Karma
1 Solution

egcthistle
Explorer

Sure, though I had to make some changes/additions to various conf files to get this to work.

..\Splunk\etc\apps\splunk_app_db_connect\local\db_connection_types.conf
Add the following stanza

[sqlazure]
displayName = SQLAzure
useConnectionPool = false
jdbcDriverClass = com.microsoft.sqlserver.jdbc.SQLServerDriver
serviceClass = com.splunk.dbx2.MSSQLJDBC
port = 1433
jdbcUrlFormat =jdbc:sqlserver://<host>:<port>;databaseName=<database>
testQuery = SELECT 1 AS test

..\Splunk\etc\apps\splunk_app_db_connect\local\db_connections.conf
(this is mine just in case, I didn't need to make changes)

[yourDBName]
connection_type = sqlazure
database = yourDBName
host = yourDBServer
identity = yourIdentity
readonly = 1
disabled = 0
port = 1433

..\Splunk\etc\system\local\web.conf
add line

splunkdConnectionTimeout = 120

View solution in original post

egcthistle
Explorer

Sure, though I had to make some changes/additions to various conf files to get this to work.

..\Splunk\etc\apps\splunk_app_db_connect\local\db_connection_types.conf
Add the following stanza

[sqlazure]
displayName = SQLAzure
useConnectionPool = false
jdbcDriverClass = com.microsoft.sqlserver.jdbc.SQLServerDriver
serviceClass = com.splunk.dbx2.MSSQLJDBC
port = 1433
jdbcUrlFormat =jdbc:sqlserver://<host>:<port>;databaseName=<database>
testQuery = SELECT 1 AS test

..\Splunk\etc\apps\splunk_app_db_connect\local\db_connections.conf
(this is mine just in case, I didn't need to make changes)

[yourDBName]
connection_type = sqlazure
database = yourDBName
host = yourDBServer
identity = yourIdentity
readonly = 1
disabled = 0
port = 1433

..\Splunk\etc\system\local\web.conf
add line

splunkdConnectionTimeout = 120

rubeniturrieta
Communicator

Thanks you very much 😄

0 Karma

mholme59
Explorer

Thank you, this helped me as well.

0 Karma

roopasree
Engager

@egcthistle ,@kamlesh_vaghela ,@niketnilay ,@ranjith_kumar @493669 @harishalipaka @FrankVl @rubeniturrieta @mholme59

Hi guys,

I am able to send data from splunk to sql server,
Now I need to send data from splunk to Azure portal Sql ,in this process what is the option to select connection type .

please suggest one link or document to send data from splunk to Azure SQL.
Thanks in advance.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...