Deployment Architecture

Can we query AWS RDS MSSQL DB tables using Splunk DB Connect 2

pavankumarh
Path Finder

The RDS SQL Instance on the AWS environment is an end point ( egs: mssql2016db.xfd4uv5wrty.us-west-2.rds.amazonaws.com ). we can connect to this instance through SQL Express or SQL Mgmt Studio, using credentials on port 1433. The instructions are here in the link below to do the same.
http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_ConnectToMicrosoftSQLServerInstance.html

When we try to do the same with "Splunk DB Connect-2", we get an "Internal Server Error" or "Operation Timed Out".

The RPC server is up and all the supported drivers are downloaded and available. We can connect to a local SQL DB, but not sure if we are doing anything wrong when connecting to AWS RDS.

http://docs.splunk.com/Documentation/DBX/2.2.0/DeployDBX/Supporteddatabases

Has anyone tried doing this?, if yes please point us to the documentation.

Tags (1)
0 Karma

kintyreBK
Engager

I know this post is older, but we recently successfully did this. Only issue that I can think for you could have been the security group rules between your Splunk instance and the RDS instance.

pavankumarh
Path Finder

Hi, Thank you for the answer. Could you please share an example connection configuration that you did. may be a screenshot from dbconnect will help.

0 Karma

kintyreBK
Engager

There really is nothing special about the connection. Just provide the DNS name of the RDS database in the host field and a valid identity (we used a local SQL Server user, not a domain account). Then, it is just a matter of having your networking and firewall rules right. Use telnet or netcat to confirm network connectivity. Only other idea I would have is version compatibility between the server and the driver.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Observability Simplified: Combining User Experience, Application Performance & ...

Tech Talk Observability Simplified: Combining User Experience, Application Performance & Network ...

Event Series May & June: From Network Visibility to Service Intelligence

Unifying the Network: Moving from Alert Noise to Service Intelligence with Splunk ITSI In today’s hybrid ...

Global Splunk User Group Events: May + June 2026

Your Splunk Community Awaits: Discover Upcoming User Group Events Worldwide    Staying ahead in the fast-paced ...