Deployment Architecture

How to change sql server window authentication for EPO db to sql server authentication for dbconnect version 2.x

cdo_splunk
Splunk Employee
Splunk Employee

How to change sql server window authentication for EPO db to sql server authentication for dbconnect version 2.x
DBconnect version 2.1.3 support sql server domain authentication with splunk server for linux using JTDS driver version .
Currently JTDS driver 1.3.1 for dbconnect version 2 using java 1.8 does not support connection through ssl. If user needs to use ssl connection then user needs to use the sql server JDBC driver and that only work for sql server authentication

Tags (1)
0 Karma
1 Solution

cdo_splunk
Splunk Employee
Splunk Employee

When the ePO server is in a domain and an Agent Handler is installed in the DMZ, the Agent Handler cannot connect to the database because it cannot use domain credentials.
Solution
Configure the Agent Handler to use the SQL sa account.

Enable the sa account or create a new SQL account
1. Open SQL Management Studio.
2. Expand Security, Logins and double-click the sa account.
3. Type and confirm a password in the General tab under the Login name section.
4. Set Login to Enabled in the Status tab and click OK.
5. Right-click the database instance name and click Properties.
6. Select SQL Server and Windows Authentication mode in the Security tab to enable the sa account.
Change the account to use for connecting to the database
1. Open a web browser and go to https://localhost:8443/core/config-auth
(where 8443 is the port for the console communication).
2. Log on with ePO credentials.
3. Delete the entry in the User Domain field.
4. Type sa in the User name field.
5. Type the password for the sa account into the User password and Confirm password fields.
6. Click Test Connection.
7. Click Apply only if the test is successful.

View solution in original post

0 Karma

cdo_splunk
Splunk Employee
Splunk Employee

When the ePO server is in a domain and an Agent Handler is installed in the DMZ, the Agent Handler cannot connect to the database because it cannot use domain credentials.
Solution
Configure the Agent Handler to use the SQL sa account.

Enable the sa account or create a new SQL account
1. Open SQL Management Studio.
2. Expand Security, Logins and double-click the sa account.
3. Type and confirm a password in the General tab under the Login name section.
4. Set Login to Enabled in the Status tab and click OK.
5. Right-click the database instance name and click Properties.
6. Select SQL Server and Windows Authentication mode in the Security tab to enable the sa account.
Change the account to use for connecting to the database
1. Open a web browser and go to https://localhost:8443/core/config-auth
(where 8443 is the port for the console communication).
2. Log on with ePO credentials.
3. Delete the entry in the User Domain field.
4. Type sa in the User name field.
5. Type the password for the sa account into the User password and Confirm password fields.
6. Click Test Connection.
7. Click Apply only if the test is successful.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...