Deployment Architecture

Why is my MS SQL server configuration not working with Splunk DB Connect app?

viverma5
Explorer

Hi,

I am trying to use SQL DB CONNCECT app to integrate MS SQL server with splunk. I have installed the app successfully on SPLUNK. But when I am trying to configure the Database and trying to establish a connection and click on Save, it throws error as "Splunkd daemon is not responding: ('Error connecting to /servicesNS/admin/dbx/dbx/databases: The read operation timed out"/

I could not find any answer related to this issue. I have configured all the parameters as suggested. Please assist me regarding this.

viverma5
Explorer

Hi..
I have sql server and splunk instance running on the same box.
I guess there is some configuration which i am missing as this is the easiest set up which we are using for test purpose

0 Karma

mkinsley_splunk
Splunk Employee
Splunk Employee

Can you confirm that you can connect to the SQL Server system from the box where you are running dbx? It sounds to me like you're not getting a response from the remote system. The dbx/databases endpoint , as far as I understand it, is waiting on the javabridge to return a connection from the remote system.

0 Karma

joao_amorim
Communicator

How do you do that?

0 Karma

viverma5
Explorer

Besides, I am using free version of SPLUNK. Not sre, if this can be any issue?

0 Karma

viverma5
Explorer

Hi,

I have checked dbx logs at that time and there was no error reported. jbridge is running and I have configured local machine as addr and port as default for the same. I have installed server jre on my machine. Could you please let me know how to specify location for jbridge?
I have used both sa account and windows account as username to establish db connection. I am in a testing phase and is connected as a workgroup. I have splunk and ms sql installed on same server

0 Karma

theouhuios
Motivator

Check the dbx log. Do you have the Java installed and location being specified for jbridge to run? Also do check the login id. Sometimes it needs domain to be specified. Try out with domain\username

0 Karma
Get Updates on the Splunk Community!

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...