Deployment Architecture

How to configure DBX Connect and Search Head Pooling in distributed configuration?

kenmcgarrahan
Explorer

Attempting to configure DBX in a distributed configuration following the guidance at:

http://docs.splunk.com/Documentation/DBX/1.1.4/DeployDBX/Setupsearchheadpooling

Attempting to execute the dbx_shpinst.py script against any DB entry yields the same error:

/apps/splunk/bin/splunk cmd python
/${shared-volume}/etc/apps/dbx/bin/dbx_shpinst.py search-head:8089 --user admin --db
my_db_name

splunk password:

database password:

No handlers could be found for logger "splunk.rest"

Could not validate password

Splunk is 6.0.1. DBX is V1.1.4.

Any guidance on resolving this error?

1 Solution

kenmcgarrahan
Explorer

Problem was ultimately traced to a firewall issue which prevented the DB connection.
Splunk support helpfully pointed out that setting 'validate' to 'False' in dbx/bin/dbx_shpinst.py allows bypassing of DB check to validate successful creation of distributed.conf.

View solution in original post

kenmcgarrahan
Explorer

Problem was ultimately traced to a firewall issue which prevented the DB connection.
Splunk support helpfully pointed out that setting 'validate' to 'False' in dbx/bin/dbx_shpinst.py allows bypassing of DB check to validate successful creation of distributed.conf.

sroback_splunk
Splunk Employee
Splunk Employee

Hi. Need more information to properly troubleshoot this - log files, etc. Might be a bug. Please file a support case on this issue for proper diagnosis at : https://www.splunk.com/index.php/submit_issue

Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...