All Apps and Add-ons
Highlighted

Why am I getting error "command="dbxquery", Unable to connect to rpcserver...Connection refused" for SQL queries via DB Connect 2 to ePO 5.1, even with all connections validated?

Communicator

Hi,

For some reason, no matter if DB Connect validates all connections and I can verify connections myself, the SQL Queries via DB Connect to EPO v5.1 are failing with the error:

alt text

Everywhere else it says it is validated so I am not sure where to go to troubleshoot this issue:

alt text

0 Karma
Highlighted

Re: Why am I getting error "command="dbxquery", Unable to connect to rpcserver...Connection refused" for SQL queries via DB Connect 2 to ePO 5.1, even with all connections validated?

Explorer

Same here though, I'm connecting to an oracle DB.

I can bypass the GUI and add the config directly to the $SPLUNKHOME/etc/apps/splunkappdbconnect/local/inputs.conf and the input works just fine.

The rpc.log gives nothing, even when configured for DEBUG.

0 Karma
Highlighted

Re: Why am I getting error "command="dbxquery", Unable to connect to rpcserver...Connection refused" for SQL queries via DB Connect 2 to ePO 5.1, even with all connections validated?

Communicator

Yup. I checked RPC log and I found one line saying ""Connection refused. Verify the connection properties. Make sure that an instance of SQL Server is running on the host and accepting TCP/IP connections at the port. Make sure that TCP connections to the port are not blocked by a firewall."." -- yet I can verify it is accepting TCP connections on port 1433 via Telnet.

0 Karma
Highlighted

Re: Why am I getting error "command="dbxquery", Unable to connect to rpcserver...Connection refused" for SQL queries via DB Connect 2 to ePO 5.1, even with all connections validated?

Explorer

Check your splunk-launch.conf file for, 'SPLUNK_BINDIP = '. Comment this out if present and restart splunk, it worked for me. I've submitted case #268017 regarding this.

0 Karma