All Apps and Add-ons

Unable to configure SPLUNK DB Connect

KSparks
Observer

I am installing spunk db connect but I am having some issues. 

I have managed to install the JDBC for MSSQL and the driver is appearing within the Driver tab. I was receiving the Task server not starting error but managed to get that resolved by sorting the JRE path and changing our port. 

I am now getting the following error: 

SPLUNKD error: HTTP 401 call not properly authenticated. 

Also when looking at the certificates, databases and identities tabs they don't load and just continue to show the loading icon.

But I cannot find any information on where the issue may stem from or what may be the resolution. 

Hopefully one of yourselves may have some insight.  Thanks in advance.

Labels (2)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

401 error is obviously a HTTP one. DBconnect internally uses a HEC input. It creates one on installation and pushes events to it from the modular input. In case you installed the addon but haven't restarted the forwarder it might have not applied the new HEC token.

0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

@KSparks - Try restarting the Splunk service. I have seen this error sometimes as a temporary issue (401 call not authenticated).

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...