Deployment Architecture

Can we query AWS RDS MSSQL DB tables using Splunk DB Connect 2

pavankumarh
Path Finder

The RDS SQL Instance on the AWS environment is an end point ( egs: mssql2016db.xfd4uv5wrty.us-west-2.rds.amazonaws.com ). we can connect to this instance through SQL Express or SQL Mgmt Studio, using credentials on port 1433. The instructions are here in the link below to do the same.
http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_ConnectToMicrosoftSQLServerInstance.html

When we try to do the same with "Splunk DB Connect-2", we get an "Internal Server Error" or "Operation Timed Out".

The RPC server is up and all the supported drivers are downloaded and available. We can connect to a local SQL DB, but not sure if we are doing anything wrong when connecting to AWS RDS.

http://docs.splunk.com/Documentation/DBX/2.2.0/DeployDBX/Supporteddatabases

Has anyone tried doing this?, if yes please point us to the documentation.

Tags (1)
0 Karma

kintyreBK
Engager

I know this post is older, but we recently successfully did this. Only issue that I can think for you could have been the security group rules between your Splunk instance and the RDS instance.

pavankumarh
Path Finder

Hi, Thank you for the answer. Could you please share an example connection configuration that you did. may be a screenshot from dbconnect will help.

0 Karma

kintyreBK
Engager

There really is nothing special about the connection. Just provide the DNS name of the RDS database in the host field and a valid identity (we used a local SQL Server user, not a domain account). Then, it is just a matter of having your networking and firewall rules right. Use telnet or netcat to confirm network connectivity. Only other idea I would have is version compatibility between the server and the driver.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Splunk App Dev Quarterly Roundup: AI, Agents, and Innovation!

Another quarter, another wave of innovation. From complex integrations to pushing the limits ...

Federated Search for Dynamic Data Self Storage Is Now Generally Available on Splunk ...

 Splunk is excited to announce the General Availability of Federated Search for Dynamic Data Self Storage ...

Index This | What has many keys but can’t unlock a door?

July 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...