I’m using Splunk DBConnect v1.1.6 to connect to a Zabbix database (mySQL). Both Zabbix and Splunk are running on the same Ubuntu (14.04) server. The Java Bridge is running but when I attempt to create a connection (External Databases >> Add New) I receive the following error: ERROR com.mysql.jdbc.exceptions.jdbc4.CommunicationsException: Communications link failure The last packet sent successfully to the server was 0 milliseconds ago. The driver has not received any packets from the server. My guidance for this setup was the document: Splunk DB Connect 1.1.6 generated 2/08/2015. The document was well written and easy to follow. If you Google this error you’ll get a million hits – I’ve trolled through many of these, and have tried a few of the suggestions, but I have found no corrective action so far. I can log into the Zabbix database via command line using either ‘localhost' or ‘127.0.0.1’. mysql/my.cnf and splunk server.conf are included. Any suggestions would be greatly appreciated. -John mysql_my.cnf: [client] port = 3306 socket = /var/run/mysqld/mysqld.sock [mysqld_safe] socket = /var/run/mysqld/mysqld.sock nice = 0 [mysqld] user = mysql pid-file = /var/run/mysqld/mysqld.pid socket = /var/run/mysqld/mysqld.sock port = 3306 basedir = /usr datadir = /var/lib/mysql tmpdir = /tmp lc-messages-dir = /usr/share/mysql skip-external-locking bind-address = 127.0.0.1 key_buffer = 16M max_allowed_packet = 16M thread_stack = 192K thread_cache_size = 8 myisam-recover = BACKUP query_cache_limit = 1M query_cache_size = 16M log_error = /var/log/mysql/error.log expire_logs_days = 10 max_binlog_size = 100M [mysqldump] quick quote-names max_allowed_packet = 16M [mysql] [isamchk] key_buffer = 16M !includedir /etc/mysql/conf.d/ $SPLUNK_HOME/etc/system/local/server.conf [sslConfig] enableSplunkdSSL = true sslKeysfilePassword = $1$z7Q/J/AiKFZE [lmpool:auto_generated_pool_download-trial] description = auto_generated_pool_download-trial quota = MAX slaves = * stack_id = download-trial [lmpool:auto_generated_pool_forwarder] description = auto_generated_pool_forwarder quota = MAX slaves = * stack_id = forwarder [lmpool:auto_generated_pool_free] description = auto_generated_pool_free quota = MAX slaves = * stack_id = free [general] pass4SymmKey = $1$mPhre7VkYwRE serverName = MYSERVERNAME [lmpool:auto_generated_pool_enterprise] description = auto_generated_pool_enterprise quota = MAX slaves = * stack_id = enterprise [license] active_group = Enterprise ... View more

I have events with several fields and the fields have a common portion and a variable portion: i.e. aaaaa0500 = 234, aaaaa0501 = 432, aaaaa0502 = 302, etc. I want to find the Min, Max, and Average of the values of these fields, within each event, over time. Ive found/tried several examples but nothing achieved the desired results. The closest I came was: ...| stats max(aaaaa05*), min(aaaaa05*), avg(aaaaa05*) by _time But this yields the stats for each field within each event which is not what I am looking for. Using the example data above, if the above data were in the same event, then I would want to see: Min=234, Max=432, Avg=322.6 Any ideas would be appreciated ... View more