Deployment Architecture

Can we query AWS RDS MSSQL DB tables using Splunk DB Connect 2

pavankumarh
Path Finder

The RDS SQL Instance on the AWS environment is an end point ( egs: mssql2016db.xfd4uv5wrty.us-west-2.rds.amazonaws.com ). we can connect to this instance through SQL Express or SQL Mgmt Studio, using credentials on port 1433. The instructions are here in the link below to do the same.
http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_ConnectToMicrosoftSQLServerInstance.html

When we try to do the same with "Splunk DB Connect-2", we get an "Internal Server Error" or "Operation Timed Out".

The RPC server is up and all the supported drivers are downloaded and available. We can connect to a local SQL DB, but not sure if we are doing anything wrong when connecting to AWS RDS.

http://docs.splunk.com/Documentation/DBX/2.2.0/DeployDBX/Supporteddatabases

Has anyone tried doing this?, if yes please point us to the documentation.

Tags (1)
0 Karma

kintyreBK
Engager

I know this post is older, but we recently successfully did this. Only issue that I can think for you could have been the security group rules between your Splunk instance and the RDS instance.

pavankumarh
Path Finder

Hi, Thank you for the answer. Could you please share an example connection configuration that you did. may be a screenshot from dbconnect will help.

0 Karma

kintyreBK
Engager

There really is nothing special about the connection. Just provide the DNS name of the RDS database in the host field and a valid identity (we used a local SQL Server user, not a domain account). Then, it is just a matter of having your networking and firewall rules right. Use telnet or netcat to confirm network connectivity. Only other idea I would have is version compatibility between the server and the driver.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...