All Apps and Add-ons

There was an error processing your request. It has been logged (ID 57cb497db88fde58).

kevin0450
New Member

While saving connection getting error: There was an error processing your request. It has been logged (ID 57cb497db88fde58).

Trying to connect to Microsoft SQL DB windows authentication.
I have installed java 8 and set the environment variables, placed db drivers(Install the SQL Server using MS Generic driver with Windows authentication) in Splunk\etc\apps\splunk_app_db_connect\drivers.

Created new identity and when trying to set connection it throwing the above error. And not letting me to query

Splunk DB Connect version 3.3.0
verified port and IP

Any help is appreciated!!!

0 Karma

jskiba99
Engager

I found this the hard way testing from a windows system going to a sql server, but the *_auth.dll (mssql-jdbc_auth-8.2.2.x64.dll in my case) file has to be placed in the proper location as well as the driver .jar file placed in the drivers folder. The section “Install the SQL Server database driver using a SQL server authentication”, Section 2. These directions were pretty easy to look over.

https://docs.splunk.com/Documentation/DBX/3.3.1/DeployDBX/Installdatabasedrivers#Microsoft_SQL_Serve...


In step 2 it also talks about the user that is used to connect being the service account splunk is running under. If that is localsystem then the machine account computername$ would be used to connect to the sql instance. It does not use the credentials specified in the identity assigned identity.


I tested also with the jTDS Driver and that did exactly what one would expect and worked seamlessly.

0 Karma

zanaown
Explorer

i'm having the same issue... was this ever resolved?

zanaown
Explorer

this was resolved for me by using a sql user rather than a domain user

0 Karma
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...