All Apps and Add-ons

Splunk DBX and Oracle TCPS connection - Getting error

vijayakumarkb
Explorer

Hi
I was trying to connect to my oracle db using TCPS. but getting below error
IO Error: Received fatal alert: handshake_failure, connect lapse 68 ms., Authentication lapse 0 ms.

steps i did.
in connection, enabled SSl checkbox
1. in java 1.8/ cacerts - imported the corporate root certificates.[ this works for sqlDeveloper and connecting from java]
2. since it didnt worked adde the root certificates to truststore and keystore in /etc/apps/splunk_app_db_connect/certs
this also didnt worked.
3. added ojdbc8.jar into driver folder

But still it is giving me error, other TCP connections are working fine.

Kindly help

Tags (2)
0 Karma

hatalla
Path Finder

Hi Vijayakumarkb,

I wonder if you were able to resolve this because I cam getting the exact same error. things I did:

  • Used ojdbc8.jar (v 12.2)
  • Imported the cert pem in both the Java store as well as the DB Connect trustore in /opt/splunk/etc/apps/splunk_app_db_connect/certs/

Running curl as in

curl --cacert /tmp/certname.pem -v https://hostname:portnumber

is successful however in DB connect under connection I am getting: "IO Error: Received fatal alert: handshake_failure, connect lapse 1 ms., Authentication lapse 0 m"

I am using DB Connect v 3.1.4 + Java v 1.8.0

Thanks

0 Karma

vijayakumarkb
Explorer

using version splunkdbx 3

0 Karma

harsmarvania57
SplunkTrust
SplunkTrust

Hi,

Based on https://docs.splunk.com/Documentation/DBX/3.3.0/DeployDBX/Installdatabasedrivers , you need to use correct JDBC driver, for example: For Oracle 12c - ojdbc7.jar driver is supported with JDK8

0 Karma

vijayakumarkb
Explorer

I use Oracle DB version 12.2 and OJDBC jar 8, tried with 7 also.

0 Karma

harsmarvania57
SplunkTrust
SplunkTrust
0 Karma

vijayakumarkb
Explorer

Thanks, i did that, but where can we see the ORA errors.
i don't see them in the logs

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...