hi
I installed it by the method presented from the link below.
http://docs.splunk.com/Documentation/DBX/3.1.1/DeployDBX/Distributeddeployment
The following error occurs.
" Unable to initialize modular input "server" defined inside the app "splunk_app_db_connect": Introspecting scheme=server: Unable to run "/opt/splunk/etc/apps/splunk_app_db_connect/linux_x86_64/bin/server.sh --scheme": child failed to start: Permission denied "
I set only identities and connections, mysql JDBC drivers
What should I do?
hello there,
please read the doc in detail:
http://docs.splunk.com/Documentation/DBX/3.1.3/DeployDBX/Architectureandperformanceconsiderations
To use Splunk DB Connect in a distributed search environment, including search head clusters, you must determine the planned use cases. For ad hoc, interactive usage of database connections by live users, install the app on search head(s). For scheduled indexing from databases and output of data to databases, install the app on heavy forwarder(s).
avoid installing DB Connect as an input (data collection) mechanism in a Search Head Cluster. keep it on a single Splunk instance only, preferably a Heavy Forwarder.
hope it helps
mine is on a heavy forwarder. this just started happening
Unable to initialize modular input "server" defined inside the app "splunk_app_db_connect": Introspecting scheme=server: Unable to run "/opt/splunk/etc/apps/splunk_app_db_connect/linux_x86_64/bin/server.sh --scheme": child failed to start: Permission denied
hello there,
please read the doc in detail:
http://docs.splunk.com/Documentation/DBX/3.1.3/DeployDBX/Architectureandperformanceconsiderations
To use Splunk DB Connect in a distributed search environment, including search head clusters, you must determine the planned use cases. For ad hoc, interactive usage of database connections by live users, install the app on search head(s). For scheduled indexing from databases and output of data to databases, install the app on heavy forwarder(s).
avoid installing DB Connect as an input (data collection) mechanism in a Search Head Cluster. keep it on a single Splunk instance only, preferably a Heavy Forwarder.
hope it helps
Thank you.
SHC tries to install to use the |dbxout command.
Is there no way to resolve the error? The splunk version is 6.6.3
My answer was to change the permissions on the server.sh file to make it and executable.
chmod 777 server.sh