This appears to be a manifestation of a known splunk core issue (SPL-88082), that the splunkd scheduler does not prioritize modular/scripted inputs with interval=0. For db connect, the modular input, which needs to be invoked twice per the design of the modular inputs feature, was being called once and then not being called the second time for an arbitrary length of time. Setting interval to 1 ensures that both calls happen within one second. Workaround: Edit $SPLUNK_HOME/etc/apps/dbx/local/inputs.conf Add "interval =1" for the [script://./bin/jbridge_server.py] stanza: [script://./bin/jbridge_server.py] disabled = 0 interval = 1 Finally, Restart splunk ... View more