Deployment Architecture

How to configure DBX Connect and Search Head Pooling in distributed configuration?

kenmcgarrahan
Explorer

Attempting to configure DBX in a distributed configuration following the guidance at:

http://docs.splunk.com/Documentation/DBX/1.1.4/DeployDBX/Setupsearchheadpooling

Attempting to execute the dbx_shpinst.py script against any DB entry yields the same error:

/apps/splunk/bin/splunk cmd python
/${shared-volume}/etc/apps/dbx/bin/dbx_shpinst.py search-head:8089 --user admin --db
my_db_name

splunk password:

database password:

No handlers could be found for logger "splunk.rest"

Could not validate password

Splunk is 6.0.1. DBX is V1.1.4.

Any guidance on resolving this error?

1 Solution

kenmcgarrahan
Explorer

Problem was ultimately traced to a firewall issue which prevented the DB connection.
Splunk support helpfully pointed out that setting 'validate' to 'False' in dbx/bin/dbx_shpinst.py allows bypassing of DB check to validate successful creation of distributed.conf.

View solution in original post

kenmcgarrahan
Explorer

Problem was ultimately traced to a firewall issue which prevented the DB connection.
Splunk support helpfully pointed out that setting 'validate' to 'False' in dbx/bin/dbx_shpinst.py allows bypassing of DB check to validate successful creation of distributed.conf.

sroback_splunk
Splunk Employee
Splunk Employee

Hi. Need more information to properly troubleshoot this - log files, etc. Might be a bug. Please file a support case on this issue for proper diagnosis at : https://www.splunk.com/index.php/submit_issue

Get Updates on the Splunk Community!

Earn a $35 Gift Card for Answering our Splunk Admins & App Developer Survey

Survey for Splunk Admins and App Developers is open now! | Earn a $35 gift card!      Hello there,  Splunk ...

Continuing Innovation & New Integrations Unlock Full Stack Observability For Your ...

You’ve probably heard the latest about AppDynamics joining the Splunk Observability portfolio, deepening our ...

Monitoring Amazon Elastic Kubernetes Service (EKS)

As we’ve seen, integrating Kubernetes environments with Splunk Observability Cloud is a quick and easy way to ...