Splunk DB Connect : intermittent Connection Refused messages

[stanwin]

Hi

'Connection refused' pops up intermittently for dbxquery . Its gotten really bad with 50-50 chance of dbxquery running most times!

Tends to go aways after few retries. This is seen across several different databases so its not to do with connection limits on DB itself.

External search command 'dbxquery' returned error code 1. Script output = "RuntimeError: Failed to run query: "....query here....", params: "None", caused by: error(111, 'Connection refused'). "

Anyone experience this issues with DBX v2 ?

Splunk version 7.1.0
DBX 2.4.0

[stanwin · Accepted solution]

if you set bindIP = * this issue goes away.

./splunk_app_db_connect/local/inputs.conf
[rpcstart://default]
javahome = /opt/splunk/jre1.8.0_144
###javahome = /usr/lib64/jvm/jre
useSSL = 0
port = 9998
bindIP = *

see also : https://answers.splunk.com/answers/337368/splunk-db-connect-connection-refused.html