Deployment Architecture

How to change sql server window authentication for EPO db to sql server authentication for dbconnect version 2.x

cdo_splunk
Splunk Employee
Splunk Employee

How to change sql server window authentication for EPO db to sql server authentication for dbconnect version 2.x
DBconnect version 2.1.3 support sql server domain authentication with splunk server for linux using JTDS driver version .
Currently JTDS driver 1.3.1 for dbconnect version 2 using java 1.8 does not support connection through ssl. If user needs to use ssl connection then user needs to use the sql server JDBC driver and that only work for sql server authentication

Tags (1)
0 Karma
1 Solution

cdo_splunk
Splunk Employee
Splunk Employee

When the ePO server is in a domain and an Agent Handler is installed in the DMZ, the Agent Handler cannot connect to the database because it cannot use domain credentials.
Solution
Configure the Agent Handler to use the SQL sa account.

Enable the sa account or create a new SQL account
1. Open SQL Management Studio.
2. Expand Security, Logins and double-click the sa account.
3. Type and confirm a password in the General tab under the Login name section.
4. Set Login to Enabled in the Status tab and click OK.
5. Right-click the database instance name and click Properties.
6. Select SQL Server and Windows Authentication mode in the Security tab to enable the sa account.
Change the account to use for connecting to the database
1. Open a web browser and go to https://localhost:8443/core/config-auth
(where 8443 is the port for the console communication).
2. Log on with ePO credentials.
3. Delete the entry in the User Domain field.
4. Type sa in the User name field.
5. Type the password for the sa account into the User password and Confirm password fields.
6. Click Test Connection.
7. Click Apply only if the test is successful.

View solution in original post

0 Karma

cdo_splunk
Splunk Employee
Splunk Employee

When the ePO server is in a domain and an Agent Handler is installed in the DMZ, the Agent Handler cannot connect to the database because it cannot use domain credentials.
Solution
Configure the Agent Handler to use the SQL sa account.

Enable the sa account or create a new SQL account
1. Open SQL Management Studio.
2. Expand Security, Logins and double-click the sa account.
3. Type and confirm a password in the General tab under the Login name section.
4. Set Login to Enabled in the Status tab and click OK.
5. Right-click the database instance name and click Properties.
6. Select SQL Server and Windows Authentication mode in the Security tab to enable the sa account.
Change the account to use for connecting to the database
1. Open a web browser and go to https://localhost:8443/core/config-auth
(where 8443 is the port for the console communication).
2. Log on with ePO credentials.
3. Delete the entry in the User Domain field.
4. Type sa in the User name field.
5. Type the password for the sa account into the User password and Confirm password fields.
6. Click Test Connection.
7. Click Apply only if the test is successful.

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...