All Apps and Add-ons

Most stable DB Connect version with Version 2+

rahulroy_splunk
Path Finder

My company does upgrade to latest version for at least 3 maintenance version for Splunk, as earlier versions may have some bugs. We're currently on DB Connect version 1.1.7 and would like to upgrade to 2.x or higher. What would be the best version to upgrade to ? alt text

0 Karma
1 Solution

mattymo
Splunk Employee
Splunk Employee

If you have to stay in 2.x, I would go with 2.4

If you can go to 3.x I would do that as it has some major performance/design enhancements.

http://blogs.splunk.com/2017/02/20/splunk-db-connect-3-released/

Splunk DB Connect 3.0 is a major release to one of the most popular Splunk add-ons. Splunk DB Connect enables powerful linkages between Splunk and the structured data world of SQL and JDBC. The major improvements of this release are:

Performance improvement. Under similar hardware conditions and environment, DB Connect V3 is 2 to 10 times faster than DB Connect V2, depending on the task.

Usability improvement. A new SQL Explorer interface assists with SQL and SPL report creation.

Improved support for scripted configuration, via reorganized configuration files and redesigned checkpointing system. Note that rising column checkpoints are no longer stored in configuration files.

Stored procedures support in dbxquery.

Retry policy on scheduled tasks is improved (no more need for auto_disable)

Either way be sure to check out the release notes/known issues here: http://docs.splunk.com/Documentation/DBX/latest/ReleaseNotes/Releasenotes

- MattyMo

View solution in original post

mattymo
Splunk Employee
Splunk Employee

If you have to stay in 2.x, I would go with 2.4

If you can go to 3.x I would do that as it has some major performance/design enhancements.

http://blogs.splunk.com/2017/02/20/splunk-db-connect-3-released/

Splunk DB Connect 3.0 is a major release to one of the most popular Splunk add-ons. Splunk DB Connect enables powerful linkages between Splunk and the structured data world of SQL and JDBC. The major improvements of this release are:

Performance improvement. Under similar hardware conditions and environment, DB Connect V3 is 2 to 10 times faster than DB Connect V2, depending on the task.

Usability improvement. A new SQL Explorer interface assists with SQL and SPL report creation.

Improved support for scripted configuration, via reorganized configuration files and redesigned checkpointing system. Note that rising column checkpoints are no longer stored in configuration files.

Stored procedures support in dbxquery.

Retry policy on scheduled tasks is improved (no more need for auto_disable)

Either way be sure to check out the release notes/known issues here: http://docs.splunk.com/Documentation/DBX/latest/ReleaseNotes/Releasenotes

- MattyMo

martin_mueller
SplunkTrust
SplunkTrust

I'd strongly recommend skipping 2.x entirely, and going straight to 3.0... Except for one reason, to soften the blow from leaving 1.x and to appreciate 3.0 more - then you should indeed go to 2.x first.

0 Karma

mattymo
Splunk Employee
Splunk Employee

I agree, v3 is where I would go, especially if the known issue about some addons not being supported doesn't affect you

- MattyMo
0 Karma

rahulroy_splunk
Path Finder

Thanks @mmodestino. We'll go with 2.4.

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...