All Apps and Add-ons
Highlighted

When deploying the REST API Modular Input add-on, it kills Splunk DB Connect process. Is there a workaround?

Contributor

Hello

While deploying the REST API Modular Input add-on to our search head cluster, Splunk DB Connect ends up getting killed, or part of it does.

Any direct DBquery works but all scheduled DBX ingestion stops i.e. DBMON tail /dump etc

They were just not scheduled as observed in the DBX logs.

The issue of it not showing up in the GUI is there as well but we can workaround that, but DBX affected by the modular input bugs?

Below answer reports the bug of DBX though not for this issue:

https://answers.splunk.com/answers/111023/unable-to-initialize-modular-input-rest-defined-inside-the...

There is a known bug with Splunk 6
that is caused by the DB Connect App.

If you have this app installed , it
causes all other Modular Inputs to not
show up on the Manager->Data Inputs
page

Although the Modular Inputs are
installed and working fine and can
still be navigated to manually :
Wondering if anyone has had this issue & if there is any workaround?

0 Karma
Highlighted

Re: When deploying the REST API Modular Input add-on, it kills Splunk DB Connect process. Is there a workaround?

Splunk Employee
Splunk Employee

hi, that's a known issue in the end-of-lifed DB Connect v1; you'd need to stay on an older Splunk platform to work around it, or try the newest version instead. http://blogs.splunk.com/2017/02/20/splunk-db-connect-3-released/

View solution in original post

0 Karma
Highlighted

Re: When deploying the REST API Modular Input add-on, it kills Splunk DB Connect process. Is there a workaround?

Contributor

Right, thanks jcoates!

0 Karma