All Apps and Add-ons

Unable to established DB connection using AD account

mchang_splunk
Splunk Employee
Splunk Employee

We are setting up a DB connection to MS-SQL server, however we are not able to get it work.
Do we need service account to have access to RPD as well?
Seeking your assistance to resolve the issue.

There are 2 scenarios happens when testing the db connection

  1. Using MS-SQL Server Using MS Generic
    Driver returns Returned results: Login failed for user 'SRV-Dev'. ClientConnectionId:

  2. Using MS-SQL Server Using MS Generic Driver With Windows
    Authentication Returned results: This driver is not configured for integrated authentication. ClientConnectionId:

NOTE: Both drivers are already installed
S-SQL Server Using MS Generic Driver Yes 6.0
MS-SQL Server Using MS Generic Driver With Kerberos Authentication Yes 6.0
MS-SQL Server Using MS Generic Driver With Windows Authentication Yes 6.0

0 Karma
1 Solution

mchang_splunk
Splunk Employee
Splunk Employee

Is DB connect installed on linux, not Windows?
If so, then only jTDS will work for windows authentication.
MS Generic driver for Windows authentication will only work when DB connect installed on Windows operating system.

Please refer this document for the detail:
https://docs.splunk.com/Documentation/DBX/3.1.4/DeployDBX/Installdatabasedrivers#Microsoft_SQL_Serve...

View solution in original post

mchang_splunk
Splunk Employee
Splunk Employee

Is DB connect installed on linux, not Windows?
If so, then only jTDS will work for windows authentication.
MS Generic driver for Windows authentication will only work when DB connect installed on Windows operating system.

Please refer this document for the detail:
https://docs.splunk.com/Documentation/DBX/3.1.4/DeployDBX/Installdatabasedrivers#Microsoft_SQL_Serve...

Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...