Splunk DB Connet 2: Why are my DBinputs getting disabled automatically?

[SrinivasaC]

Hi ,

We have created DBInputs for our tables with a 15 secs interval, but we are getting the issue below and our DBInputs are getting disabled:

02/08/2016 10:47:41 [ERROR] [__init__.py] Splunkd daemon is not responding: ('Error connecting to /servicesNS/splunk-system-user/-/db_connect/connections/MSSQLDB: The read operation timed out',)
Traceback (most recent call last):
  File "/opt/splunk/splunk_sas/lib/python2.7/site-packages/splunk/rest/__init__.py", line 184, in dispatch
    methodOutput = method()
  File "/opt/splunk/splunk_sas/etc/apps/splunk_app_db_connect/bin/dbquery.py", line 66, in handle_GET
    self.db, self.db_health = self.get_connection(db)
  File "/opt/splunk/splunk_sas/etc/apps/splunk_app_db_connect/bin/dbinfo.py", line 79, in get_connection
    dbm, conn = self.get_conn_params(db)
  File "/opt/splunk/splunk_sas/etc/apps/splunk_app_db_connect/bin/dbinfo.py", line 92, in get_conn_params
    conn = en.getEntity(["db_connect", "connections"], db, namespace="-", owner=self.userName, sessionKey=self.sessionKey)
  File "/opt/splunk/splunk_sas/lib/python2.7/site-packages/splunk/entity.py", line 249, in getEntity
    serverResponse, serverContent = rest.simpleRequest(uri, getargs=kwargs, sessionKey=sessionKey, raiseAllErrors=True)
  File "/opt/splunk/splunk_sas/lib/python2.7/site-packages/splunk/rest/__init__.py", line 478, in simpleRequest
    raise splunk.SplunkdConnectionException, 'Error connecting to %s: %s' % (path, str(e))
SplunkdConnectionException: Splunkd daemon is not responding: ('Error connecting to /servicesNS/splunk-system-user/-/db_connect/connections/MSSQLDB: The read operation timed out',)

02/08/2016 10:48:06 [CRITICAL] [mi_base.py] Caught exception Splunkd daemon is not responding: (u'Error connecting to https://127.0.0.1:8089/servicesNS/admin/splunk_app_db_connect/db_connect/connections/MSSQLDB: The read operation timed out',) in modular input mi_input://dbinput_Analyst1. Disabling modular input.
02/08/2016 10:48:09 [ERROR] [__init__.py] Socket error communicating with splunkd (error=The read operation timed out), path = https://127.0.0.1:8089/servicesNS/admin/splunk_app_db_connect/db_connect/connections/MSSQLDB
02/08/2016 10:48:12 [CRITICAL] [mi_base.py] Caught exception Splunkd daemon is not responding: (u'Error connecting to https://127.0.0.1:8089/servicesNS/admin/splunk_app_db_connect/db_connect/connections/MSSQLDB: The read operation timed out',) in modular input mi_input://dbinput_Analyst2. Disabling modular input.

02/08/2016 10:48:25 [CRITICAL] [mi_base.py] Caught exception Splunkd daemon is not responding: (u'Error connecting to https://127.0.0.1:8089/servicesNS/admin/splunk_app_db_connect/db_connect/connections/MSSQLDB: The read operation timed out',) in modular input mi_input://dbinput_ Analyst3. Disabling modular input.

02/08/2016 10:49:05 [CRITICAL] [mi_base.py] Caught exception Splunkd daemon is not responding: (u'Error connecting to https://127.0.0.1:8089/servicesNS/admin/splunk_app_db_connect/db_connect/connections/MSSQLDB: The read operation timed out',) in modular input mi_input://dbinput_ Analyst4. Disabling modular input.

Please help us.

[monteirolopes]

Hi,

I have the same problem. What did you do to fix it?

Regards,
Lopes.

[SrinivasaC]

Add
in Stanza

[settings]
splunkdConnectionTimeout =

in SPLUNK-HOME/etc/system/local/web.conf file..

[monteirolopes]

In my case, I'm running a SQL query that reads a file 20 in 20 minutes. After a few hours automatically the operation created is disabled. The results of my query generates about 20 lines My stanza is configured as follows:

[settings]
splunkdConnectionTimeout = 1200

The problem still persists. Any suggestion?

[jcoates_splunk]

your splunk web server is not able to respond to the input in time. try increasing the web server timeout