Hello. i increased maxWaitMillis = 180000 and Db connect version is 3.4.2. Still i am getting the same error for oracle servers only. error message: ERROR com.splunk.dbx.connector.ConnectorFactory - action=failed_to_load_get_connection error=unnamed_pool_-131xxx5723_jdbc__oracle__thin__@server_name - Connection is not available, request timed out after 180000ms. ... View more

In case anyone is wondering, I have been running DB Connect v2.4.0 with JDBC 4.2 on JRE 1.8 for a few weeks now without any problem. I guess that proves that it is compatible, at least well enough for me... ... View more

there are a couple of things to consider - having a rising column will actually add "order by" clause to your query, so not sure why you were experiencing this - for catching up on historical data, you can do a batch input to ingest everything and then create a new rising column input to stay up to date - timestamps are not recommended for rising columns: https://answers.splunk.com/answers/400221/why-is-using-a-timestamp-column-for-the-rising-col.html ... View more

Coming back to this problem having learned more about Splunk, etc. the strict answer (pointed to by Chris) is that the app is only aware of indexes defined locally in indexes.conf. Indeed, if you follow the advice in the link regarding best practice for distributed environments, the whole question becomes irrelevant as you'll be installing on servers (Indexers or Heavy Forwarders) where you won't use GUI configuration anyway. This "bug" is only manifest in situations where you are configuring an input on a Search Head in a distributed environment; i.e. not following best-practice. ... View more

I'm still interested in the 'proper' answer as well. I've worked around the issue for now by using an Active Directory service account to run the Splunkd Service as a Windows service. That same Active Directory account has access to the MS SQL DBs I need to query so the workaround works but it isn't ideal because I was hoping to use a different account for running the Spunkd Service compared to querying the MS SQL DBs... ... View more

I left this without checking for a few days and now search is working for me, so it looks like you have to wait between 1-5 days before search works again after "downgrading" to the free license. ... View more

This is infuriating. I have uninstalled, rm -rf 'd /opt/splunk, got a new trial license for Light, installed fresh from RPM, and it STILL says "violation" -- this is on a FRESH install, no inputs defined. I'd already conceded to give up all my old data from the trial. I don't know how to resolve this. We'll have to use another tool. Would NOT recommend. ... View more