All Apps and Add-ons

Splunk DB Connect: dbxquery failure; Failure starting process

graytshirt
New Member

RHEL6, Splunk 7.0, DB Connect 3.1.1, java 1.8, mysql jdbc connector

from the search.log:

11-07-2017 20:52:28.844 INFO  SearchParser - PARSING: | dbxquery query="select 1;" connection="Moog" 
11-07-2017 20:52:28.847 INFO  ISplunkDispatch - Not running in splunkd. Bundle replication not triggered.
11-07-2017 20:52:28.848 INFO  UserManager - Setting user context:  <snip>
11-07-2017 20:52:28.848 INFO  UserManager - Done setting user context: NULL -> <snip>
11-07-2017 20:52:28.848 INFO  ChunkedExternProcessor - Running process: /opt/splunk/etc/apps/splunk_app_db_connect/linux_x86_64/bin/command.sh -Dlogback.configurationFile\=../config/command_logback.xml -DDBX_COMMAND_LOG_LEVEL\=INFO -cp ../jars/command.jar com.splunk.dbx.command.DbxQueryCommand
11-07-2017 20:52:28.851 ERROR ChunkedExternProcessor - Failure starting process

a jdbc connection pool is made though, and the sqlexplorer does populate with data.

0 Karma

graytshirt
New Member

I did a fresh searchhead cluster install on RHEL7 and I had no issues running queries.

Final install:
RHEL7.1, Splunk 7.0.0, DB Connect 3.1.0, Java 1.8 build 151 (Oracle), Postgres JDBC 42.1.4

Just want to point out I switch from MySQL to PostgreSQL, this is an Architecture iteration, I was testing MySQL due to the previous errors.

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...