Splunk Enterprise

SplunkDB Connect and MongoDB on prem

fabrizioalleva
Path Finder

Hi all,

I need to use SplunkDB connect to connect to a MongoDB on prem instance.

I've installed Splunk DBX Add-on for MongoDB  but I understand that it works only with Atlas MongoDB and not with Mongo on prem installation.

I tried to follow this suggestion

https://community.splunk.com/t5/All-Apps-and-Add-ons/Is-it-possible-to-use-Splunk-DB-Connect-to-sear...

but the format of stanza is  quite different.

 I try to create a connection using the MongoDB Atlas Connection Type, I receive this error:

Command failed with error 40324 (Location40324): 'Unrecognized pipeline stage name: '$sql'

Any suggestion ?

Fabrizio

 

 

Labels (1)
0 Karma

kiran_panchavat
Contributor

@fabrizioalleva 

Connecting Splunk DB Connect to an on-premises MongoDB instance requires some additional steps compared to using MongoDB Atlas.

To connect to your on-premises MongoDB, you’ll need the MongoDB JDBC driver. You can download it from https://unityjdbc.com/download.php?type=mongodb  . Make sure to obtain the mongodb_unityjdbc_full.jar from the installation folder.

Then, you can configure a JDBC Connection

https://unityjdbc.com/mongojdbc/setup/mongodb_jdbc_splunk_dbconnect_v3.pdf 

I hope this helps, if any reply helps you, you could add your upvote/karma points to that reply, thanks.

 

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...