Deployment Architecture

Can we query AWS RDS MSSQL DB tables using Splunk DB Connect 2

pavankumarh
Path Finder

The RDS SQL Instance on the AWS environment is an end point ( egs: mssql2016db.xfd4uv5wrty.us-west-2.rds.amazonaws.com ). we can connect to this instance through SQL Express or SQL Mgmt Studio, using credentials on port 1433. The instructions are here in the link below to do the same.
http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_ConnectToMicrosoftSQLServerInstance.html

When we try to do the same with "Splunk DB Connect-2", we get an "Internal Server Error" or "Operation Timed Out".

The RPC server is up and all the supported drivers are downloaded and available. We can connect to a local SQL DB, but not sure if we are doing anything wrong when connecting to AWS RDS.

http://docs.splunk.com/Documentation/DBX/2.2.0/DeployDBX/Supporteddatabases

Has anyone tried doing this?, if yes please point us to the documentation.

Tags (1)
0 Karma

kintyreBK
Engager

I know this post is older, but we recently successfully did this. Only issue that I can think for you could have been the security group rules between your Splunk instance and the RDS instance.

pavankumarh
Path Finder

Hi, Thank you for the answer. Could you please share an example connection configuration that you did. may be a screenshot from dbconnect will help.

0 Karma

kintyreBK
Engager

There really is nothing special about the connection. Just provide the DNS name of the RDS database in the host field and a valid identity (we used a local SQL Server user, not a domain account). Then, it is just a matter of having your networking and firewall rules right. Use telnet or netcat to confirm network connectivity. Only other idea I would have is version compatibility between the server and the driver.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Guided Onboarding with Auto-schema Is Now Generally Available

  We are excited to announce the General Availability of Guided Onboarding with Auto-Schematization ...

ATTENTION: We’re Moving! (AGAIN!)

The Splunk Community Slack is undergoing a system migration to keep our workspace secure and ...

Deep Dive: Optimizing Telemetry Pipelines in Splunk Observability Cloud

In this session, we will peel back the layers of Splunk Observability Cloud’s cost-optimization features. ...