For some reason, no matter if DB Connect validates all connections and I can verify connections myself, the SQL Queries via DB Connect to EPO v5.1 are failing with the error:
Everywhere else it says it is validated so I am not sure where to go to troubleshoot this issue:
Same here though, I'm connecting to an oracle DB.
I can bypass the GUI and add the config directly to the $SPLUNKHOME/etc/apps/splunkappdbconnect/local/inputs.conf and the input works just fine.
The rpc.log gives nothing, even when configured for DEBUG.
Yup. I checked RPC log and I found one line saying ""Connection refused. Verify the connection properties. Make sure that an instance of SQL Server is running on the host and accepting TCP/IP connections at the port. Make sure that TCP connections to the port are not blocked by a firewall."." -- yet I can verify it is accepting TCP connections on port 1433 via Telnet.
Check your splunk-launch.conf file for, 'SPLUNK_BINDIP = '. Comment this out if present and restart splunk, it worked for me. I've submitted case #268017 regarding this.