I run into the same Issue when upgrading from 3.9 to 3.10. With this procedure I got it working again: Stop splunk rm -Rf /opt/splunk/etc/apps/splunk_app_db_connect/keystore/ rm -f /opt/splunk/etc/apps/splunk_app_db_connect/certs/identity.dat rm -f /opt/splunk/etc/apps/splunk_app_db_connect/certs/keystore_password.dat rm -f /opt/splunk/etc/apps/splunk_app_db_connect/jars/dbxquery.vmopts rm -f /opt/splunk/etc/apps/splunk_app_db_connect/jars/server.vmopts mv /opt/splunk/etc/apps/splunk_app_db_connect/local {backupfolder} Start Splunk Open the dbconnect app in the browser, on the welcome page, click the Configuration button. Configure the JDK setting and click save Restore db_connections.conf, db_inputs.conf and identities.conf to the splunk_app_db_connect/local folder. Restart Splunk On the configuration page go to Identities. Edit each identity, re-enter the password and save it. Also have a look on your input and output names. If there is a minus in the name it does not work again. The Names must match the regex \w+ otherwise it will crash in 3.10 ... View more