I am installing spunk db connect but I am having some issues.
I have managed to install the JDBC for MSSQL and the driver is appearing within the Driver tab. I was receiving the Task server not starting error but managed to get that resolved by sorting the JRE path and changing our port.
I am now getting the following error:
SPLUNKD error: HTTP 401 call not properly authenticated.
Also when looking at the certificates, databases and identities tabs they don't load and just continue to show the loading icon.
But I cannot find any information on where the issue may stem from or what may be the resolution.
Hopefully one of yourselves may have some insight. Thanks in advance.
401 error is obviously a HTTP one. DBconnect internally uses a HEC input. It creates one on installation and pushes events to it from the modular input. In case you installed the addon but haven't restarted the forwarder it might have not applied the new HEC token.
@KSparks - Try restarting the Splunk service. I have seen this error sometimes as a temporary issue (401 call not authenticated).