All Apps and Add-ons

Splunk DBX and Oracle TCPS connection - Getting error

vijayakumarkb
Explorer

Hi
I was trying to connect to my oracle db using TCPS. but getting below error
IO Error: Received fatal alert: handshake_failure, connect lapse 68 ms., Authentication lapse 0 ms.

steps i did.
in connection, enabled SSl checkbox
1. in java 1.8/ cacerts - imported the corporate root certificates.[ this works for sqlDeveloper and connecting from java]
2. since it didnt worked adde the root certificates to truststore and keystore in /etc/apps/splunk_app_db_connect/certs
this also didnt worked.
3. added ojdbc8.jar into driver folder

But still it is giving me error, other TCP connections are working fine.

Kindly help

Tags (2)
0 Karma

hatalla
Path Finder

Hi Vijayakumarkb,

I wonder if you were able to resolve this because I cam getting the exact same error. things I did:

  • Used ojdbc8.jar (v 12.2)
  • Imported the cert pem in both the Java store as well as the DB Connect trustore in /opt/splunk/etc/apps/splunk_app_db_connect/certs/

Running curl as in

curl --cacert /tmp/certname.pem -v https://hostname:portnumber

is successful however in DB connect under connection I am getting: "IO Error: Received fatal alert: handshake_failure, connect lapse 1 ms., Authentication lapse 0 m"

I am using DB Connect v 3.1.4 + Java v 1.8.0

Thanks

0 Karma

vijayakumarkb
Explorer

using version splunkdbx 3

0 Karma

harsmarvania57
Ultra Champion

Hi,

Based on https://docs.splunk.com/Documentation/DBX/3.3.0/DeployDBX/Installdatabasedrivers , you need to use correct JDBC driver, for example: For Oracle 12c - ojdbc7.jar driver is supported with JDK8

0 Karma

vijayakumarkb
Explorer

I use Oracle DB version 12.2 and OJDBC jar 8, tried with 7 also.

0 Karma

harsmarvania57
Ultra Champion
0 Karma

vijayakumarkb
Explorer

Thanks, i did that, but where can we see the ORA errors.
i don't see them in the logs

0 Karma
Get Updates on the Splunk Community!

Demo Day: Strengthen Your SOC with Splunk Enterprise Security 8.1

Today’s threat landscape is more complex than ever. Security operation centers (SOCs) are overwhelmed with ...

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...