Splunk Enterprise

search head cluster after splunk db connect ver 3.1.1 Error related

spl109
Explorer

hi
I installed it by the method presented from the link below.
http://docs.splunk.com/Documentation/DBX/3.1.1/DeployDBX/Distributeddeployment

The following error occurs.
" Unable to initialize modular input "server" defined inside the app "splunk_app_db_connect": Introspecting scheme=server: Unable to run "/opt/splunk/etc/apps/splunk_app_db_connect/linux_x86_64/bin/server.sh --scheme": child failed to start: Permission denied "

I set only identities and connections, mysql JDBC drivers

What should I do?

Tags (1)
0 Karma
1 Solution

adonio
Ultra Champion

hello there,

please read the doc in detail:
http://docs.splunk.com/Documentation/DBX/3.1.3/DeployDBX/Architectureandperformanceconsiderations

To use Splunk DB Connect in a distributed search environment, including search head clusters, you must determine the planned use cases. For ad hoc, interactive usage of database connections by live users, install the app on search head(s). For scheduled indexing from databases and output of data to databases, install the app on heavy forwarder(s). 

avoid installing DB Connect as an input (data collection) mechanism in a Search Head Cluster. keep it on a single Splunk instance only, preferably a Heavy Forwarder.

hope it helps

View solution in original post

0 Karma

jaxjohnny2000
Builder

mine is on a heavy forwarder. this just started happening

Unable to initialize modular input "server" defined inside the app "splunk_app_db_connect": Introspecting scheme=server: Unable to run "/opt/splunk/etc/apps/splunk_app_db_connect/linux_x86_64/bin/server.sh --scheme": child failed to start: Permission denied

0 Karma

adonio
Ultra Champion

hello there,

please read the doc in detail:
http://docs.splunk.com/Documentation/DBX/3.1.3/DeployDBX/Architectureandperformanceconsiderations

To use Splunk DB Connect in a distributed search environment, including search head clusters, you must determine the planned use cases. For ad hoc, interactive usage of database connections by live users, install the app on search head(s). For scheduled indexing from databases and output of data to databases, install the app on heavy forwarder(s). 

avoid installing DB Connect as an input (data collection) mechanism in a Search Head Cluster. keep it on a single Splunk instance only, preferably a Heavy Forwarder.

hope it helps

0 Karma

spl109
Explorer

Thank you.
SHC tries to install to use the |dbxout command.

Is there no way to resolve the error? The splunk version is 6.6.3

0 Karma

jaxjohnny2000
Builder

My answer was to change the permissions on the server.sh file to make it and executable.

chmod 777 server.sh

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...