Splunk Enterprise

Splunk DB connect Error: "connect timed out ? How to fix this issue

Hemnaath
Motivator

 

When I am trying to validate the connection  the validation is taking time and finally popping out a message saying 

 The TCP/IP connection to the host xxxxxx, port 1433 has failed. Error: "connect timed out. Verify the connection properties. Make sure that an instance of SQL Server is running on the host and accepting TCP/IP connections at the port. Make sure that TCP connections to the port are not blocked by a firewall.

 

Can anyone help me on this! 

 

Labels (1)
Tags (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

DB Connect has its own logs named splunk_app_db_connect_*.log.

The network said "outgoing to 1433 is opened for all Splunk instances", but that's only half the story.  Does the DB server accept incoming connections from the Splunk servers?

From the Splunk server running DBX, try running traceroute to the DB server to see what it reports.

---
If this reply helps you, Karma would be appreciated.
0 Karma

Hemnaath
Motivator

Yes I had checked with my network team about the port issue which is highlighted in the message.  But  network team confirmed me that outgoing to 1433 is opened for all Splunk instance. 

I tired to check the splunk internal logs with sourcetype=splunkd but unable to detect any error. 

can you please guide me from which log I can get the error details for troubleshooting this issue.

 

 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

The error message offers a few suggestions to fix the problem.  Did you try them?

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...