cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
jotaforense
Explorer
Member since: ‎07-03-2020
a month ago
Community Statistics
Posts 13
Solutions 0
Karma Given 1
Karma Received 1
Member Since ‎07-03-2020
Activity Feed
View All

Error dbconnect app using the "MS-SQL Server Using...

by in Splunk Enterprise
a month ago
a month ago
When trying to make a connection with the dbconnect app using the "MS-SQL Server Using MS Generic Driver" drive, it is giving an error and requesting port 6666, but in the connection  string I use port 1433. Does anyone know why this change is happening and how? How do I solve this? Note: already has a firewall rule created for port 1433 Connection String jdbc:sqlserver://myhost.database.windows.net:1433;databaseName=mydb;selectMethod=cursor;encrypt=false Error: Connection failure reason: The TCP/IP connection to the host myhost.database.windows.net, port 6666 has failed. Error: "connect timed out. Verify the connection properties. Make sure that an instance of SQL Server is running on the host and accepting TCP/IP connections at the port. Make sure that TCP connections to the port are not blocked by a firewall.". Diagnosis: Either the database is unavailable, or the specified host/port is incorrect, or you are blocked by a firewall Troubleshooting recommendation: Make sure the database is running on the server and you or the database are not blocked by a firewall.   ... View more
Labels

Re: App Api for splunk

by in All Apps and Add-ons
‎08-22-2023 12:20 PM
‎08-22-2023 12:20 PM
Hello @yuanliu , in my case I'm using the "REST API Modular Input" app - (pint attached), this app requires me to have a paid activation key, my api is a standard api with "bearer" authentication method. My question is if in addition to the "REST API Modular Input" there is another app that does the same function so that it does not require the activation key? did you understand? ... View more

Re: App Api for splunk

by in All Apps and Add-ons
‎08-18-2023 01:28 PM
‎08-18-2023 01:28 PM
I want to export data from an api into my splunk, and for that I use an application, because I don't have access to the root user, I want to do it via applications. ... View more

Re: I have an odd problem with db_connect

by in All Apps and Add-ons
‎08-18-2023 12:57 PM
1 Karma
‎08-18-2023 12:57 PM
1 Karma
@rapmancz , I believe the problem resolved when I updated the db_connect driver. ... View more

Are there an free App Api for splunk?

by in All Apps and Add-ons
‎08-18-2023 12:51 PM
‎08-18-2023 12:51 PM
Please indicate an application available in the splunk store (Find more Apps), preferably free. What possibility to establish authentication to an api type bearer? I installed the "REST API Modular Input" app, but the activation key needs to be purchased. ... View more
Labels

Re: join tables

by in Splunk Search
‎07-20-2020 09:48 AM
‎07-20-2020 09:48 AM
can you help me how does the join between these two tables work? ... View more

Re: join tables

by in Splunk Search
‎07-20-2020 07:50 AM
‎07-20-2020 07:50 AM
I'm using the first case! ... View more

join tables

by in Splunk Search
‎07-20-2020 07:33 AM
‎07-20-2020 07:33 AM
I would like to obtain the results of two tables. | dbxquery query = "select * from table1 " connection = "Connection1" Fields table1: ID_USER | NR_CARD | DT_CARD | dbxquery query = "select * from table2 " connection = "Connection1" Fields table2:  ID_USER | DS_EMAIL | DS_NAME the common fields between the two tables is: "ID_USER". How to join tables 1 and 2 and transfer all fields? [table1 / 2] ID_USER | [table1] | NR_CARD | [table1] DT_CARD | [table2] DS_EMAIL | [table2] DS_NAME ... View more
Labels

Re: I have an odd problem with db_connect

by in All Apps and Add-ons
‎07-06-2020 07:54 AM
‎07-06-2020 07:54 AM
I'll check! ... View more

Re: I have an odd problem with db_connect

by in All Apps and Add-ons
‎07-06-2020 06:02 AM
‎07-06-2020 06:02 AM
look at the error log the server name has been replaced. [] 07-03-2020 13:10:28.195 ERROR ChunkedExternProcessor - stderr: 13:10:28.194 111194@vukoo-br [main] INFO c.splunk.dbx.utils.TrustManagerUtil - action=load_key_manager_succeed ..... 07-03-2020 13:10:28.341 ERROR ChunkedExternProcessor - stderr: 13:10:28.337 111194@vukoo-br [main] WARN com.splunk.dbx.message.MessageEnum - action=initialize_resource_bundle_files error=Can't find bundle for base name Messages, locale en_US 07-03-2020 13:10:29.073 ERROR ChunkedExternProcessor - stderr: 13:10:29.073 111194@vukoo-br [main] WARN c.s.d.s.driver.DriverServiceImpl - action=load_drivers Can not load any driver from files [/opt/splunk/etc/apps/splunk_app_db_connect/drivers/sqljdbc42.jar] 07-03-2020 13:10:29.074 ERROR ChunkedExternProcessor - stderr: 13:10:29.074 111194@vukoo-br [main] WARN c.s.d.s.driver.DriverServiceImpl - action=load_drivers Can not load any driver from files [/opt/splunk/etc/apps/splunk_app_db_connect/drivers/sqljdbc41.jar] 07-03-2020 13:10:29.087 ERROR ChunkedExternProcessor - stderr: 13:10:29.087 111194@vukoo-br [main] INFO c.s.d.s.driver.DriverServiceImpl - action=register_driver driver=oracle.jdbc.OracleDriver 11.2 succeeded 07-03-2020 13:10:29.087 ERROR ChunkedExternProcessor - stderr: 13:10:29.087 111194@vukoo-br [main] INFO c.s.d.s.driver.DriverServiceImpl - action=load_drivers spent 79 ms to rescan all jdbc drivers 07-03-2020 13:10:29.141 ERROR ChunkedExternProcessor - stderr: 13:10:29.138 111281@vukoo-br [main] INFO c.splunk.dbx.utils.TrustManagerUtil - action=load_key_manager_succeed 07-03-2020 13:10:29.152 ERROR ChunkedExternProcessor - stderr: 13:10:29.149 111194@vukoo-br [main] INFO c.s.dbx.connector.ConnectorFactory - action=collect_connection_pool_metrics interval_in_seconds=60 ..... 07-03-2020 13:10:29.245 ERROR ChunkedExternProcessor - stderr: 13:10:29.244 111281@vukoo-br [main] WARN com.splunk.dbx.message.MessageEnum - action=initialize_resource_bundle_files error=Can't find bundle for base name Messages, locale en_US ..... 07-03-2020 13:10:29.775 ERROR ChunkedExternProcessor - stderr: 13:10:29.774 111315@vukoo-br [main] INFO c.splunk.dbx.utils.TrustManagerUtil - action=load_key_manager_succeed ..... 07-03-2020 13:10:29.877 ERROR ChunkedExternProcessor - stderr: 13:10:29.876 111315@vukoo-br [main] WARN com.splunk.dbx.message.MessageEnum - action=initialize_resource_bundle_files error=Can't find bundle for base name Messages, locale en_US 07-03-2020 13:10:30.310 ERROR ChunkedExternProcessor - stderr: 13:10:30.310 111315@vukoo-br [main] WARN c.s.d.s.driver.DriverServiceImpl - action=load_drivers Can not load any driver from files [/opt/splunk/etc/apps/splunk_app_db_connect/drivers/sqljdbc42.jar] 07-03-2020 13:10:30.311 ERROR ChunkedExternProcessor - stderr: 13:10:30.311 111315@vukoo-br [main] WARN c.s.d.s.driver.DriverServiceImpl - action=load_drivers Can not load any driver from files [/opt/splunk/etc/apps/splunk_app_db_connect/drivers/sqljdbc41.jar] 07-03-2020 13:10:30.325 ERROR ChunkedExternProcessor - stderr: 13:10:30.320 111315@vukoo-br [main] INFO c.s.d.s.driver.DriverServiceImpl - action=register_driver driver=oracle.jdbc.OracleDriver 11.2 succeeded 07-03-2020 13:10:30.325 ERROR ChunkedExternProcessor - stderr: 13:10:30.320 111315@vukoo-br [main] INFO c.s.d.s.driver.DriverServiceImpl - action=load_drivers spent 63 ms to rescan all jdbc drivers 07-03-2020 13:10:30.390 ERROR ChunkedExternProcessor - stderr: 13:10:30.389 111315@vukoo-br [main] INFO c.s.dbx.connector.ConnectorFactory - action=collect_connection_pool_metrics interval_in_seconds=60 07-03-2020 13:10:30.641 ERROR ChunkedExternProcessor - stderr: 13:10:30.641 111315@vukoo-br [main] WARN c.s.d.c.c.impl.JdbcConnectorImpl - fetch size value reached the allowed max value, MAX_FETCH_SIZE_ALLOWED=10000 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: 13:10:30.800 111315@vukoo-br [main] ERROR c.s.d.c.c.impl.JdbcConnectorImpl - action=fail_to_close_connection error=Protocol violation 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: Exception in thread "main" java.lang.OutOfMemoryError: Java heap space 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at java.lang.reflect.Array.newArray(Native Method) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at java.lang.reflect.Array.newInstance(Array.java:75) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at oracle.jdbc.driver.BufferCache.get(BufferCache.java:212) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at oracle.jdbc.driver.PhysicalConnection.getCharBuffer(PhysicalConnection.java:7698) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at oracle.jdbc.driver.OracleStatement.prepareAccessors(OracleStatement.java:1013) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at oracle.jdbc.driver.T4CTTIdcb.receiveCommon(T4CTTIdcb.java:277) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at oracle.jdbc.driver.T4CTTIdcb.receive(T4CTTIdcb.java:146) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at oracle.jdbc.driver.T4C8Oall.readDCB(T4C8Oall.java:916) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at oracle.jdbc.driver.T4CTTIfun.receive(T4CTTIfun.java:421) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at oracle.jdbc.driver.T4CTTIfun.doRPC(T4CTTIfun.java:227) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at oracle.jdbc.driver.T4C8Oall.doOALL(T4C8Oall.java:531) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at oracle.jdbc.driver.T4CPreparedStatement.doOall8(T4CPreparedStatement.java:208) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at oracle.jdbc.driver.T4CPreparedStatement.executeForDescribe(T4CPreparedStatement.java:886) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at oracle.jdbc.driver.OracleStatement.executeMaybeDescribe(OracleStatement.java:1175) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at oracle.jdbc.driver.OracleStatement.doExecuteWithTimeout(OracleStatement.java:1288) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at oracle.jdbc.driver.OraclePreparedStatement.executeInternal(OraclePreparedStatement.java:3613) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at oracle.jdbc.driver.OraclePreparedStatement.executeQuery(OraclePreparedStatement.java:3657) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at oracle.jdbc.driver.OraclePreparedStatementWrapper.executeQuery(OraclePreparedStatementWrapper.java:1495) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at com.splunk.dbx.connector.connector.impl.JdbcConnectorImpl.executeQuery(JdbcConnectorImpl.java:291) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at com.splunk.dbx.connector.connector.impl.OracleConnectorImpl.executeQuery(OracleConnectorImpl.java:41) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at com.splunk.dbx.command.DbxQueryCommand.generate(DbxQueryCommand.java:308) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at com.splunk.search.command.GeneratingCommand.process(GeneratingCommand.java:183) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at com.splunk.search.command.ChunkedCommandDriver.execute(ChunkedCommandDriver.java:102) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at com.splunk.search.command.AbstractSearchCommand.run(AbstractSearchCommand.java:50) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at com.splunk.search.command.GeneratingCommand.run(GeneratingCommand.java:15) 07-03-2020 13:10:30.801 ERROR ChunkedExternProcessor - stderr: at com.splunk.dbx.command.DbxQueryCommand.main(DbxQueryCommand.java:234) 07-03-2020 13:10:30.828 ERROR ChunkedExternProcessor - EOF while attempting to read transport header 07-03-2020 13:10:30.828 ERROR ChunkedExternProcessor - Error in 'dbxquery' command: External search command exited unexpectedly with non-zero error code 1. ..... 07-03-2020 13:10:30.835 ERROR dispatchRunner - RunDispatch::runDispatchThread threw error: Error in 'dbxquery' command: External search command exited unexpectedly with non-zero error code 1. ... View more

Re: I have an odd problem with db_connect

by in All Apps and Add-ons
‎07-03-2020 01:31 PM
‎07-03-2020 01:31 PM
can i send the log?  ... View more

db_connect: Why an error when trying to query basi...

by in All Apps and Add-ons
‎07-03-2020 11:42 AM
‎07-03-2020 11:42 AM
Hello, I have an odd problem with db_connect : My connection is ok I can see the database and the tables but when i try to query (basic select) i have an error Error in 'dbxquery' command: External search command exited unexpectedly with non-zero error code 1. The search job has failed due to an error. You may be able view the job in the Job Inspector. My query is | dbxquery query="select * from aps.notifications " connection="PE" even select 1 from dual doesn't work Database : Oracle User : root privileges Splunk 7.0.0 DB connect 3.1.4 App Build 43   ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
a month ago
Karma from
View All
Karma given to
View All