All Apps and Add-ons

Is it possible to connect Splunk DB Connect 2 works with an Azure SQL Database?

rubeniturrieta
Communicator

Hi guys,

I'm trying to connect Splunk DB Connect 2 with a SQL Azure database. Should this work? Are there any special considerations?

Any help will be grateful

Thank you

0 Karma
1 Solution

egcthistle
Explorer

Sure, though I had to make some changes/additions to various conf files to get this to work.

..\Splunk\etc\apps\splunk_app_db_connect\local\db_connection_types.conf
Add the following stanza

[sqlazure]
displayName = SQLAzure
useConnectionPool = false
jdbcDriverClass = com.microsoft.sqlserver.jdbc.SQLServerDriver
serviceClass = com.splunk.dbx2.MSSQLJDBC
port = 1433
jdbcUrlFormat =jdbc:sqlserver://<host>:<port>;databaseName=<database>
testQuery = SELECT 1 AS test

..\Splunk\etc\apps\splunk_app_db_connect\local\db_connections.conf
(this is mine just in case, I didn't need to make changes)

[yourDBName]
connection_type = sqlazure
database = yourDBName
host = yourDBServer
identity = yourIdentity
readonly = 1
disabled = 0
port = 1433

..\Splunk\etc\system\local\web.conf
add line

splunkdConnectionTimeout = 120

View solution in original post

egcthistle
Explorer

Sure, though I had to make some changes/additions to various conf files to get this to work.

..\Splunk\etc\apps\splunk_app_db_connect\local\db_connection_types.conf
Add the following stanza

[sqlazure]
displayName = SQLAzure
useConnectionPool = false
jdbcDriverClass = com.microsoft.sqlserver.jdbc.SQLServerDriver
serviceClass = com.splunk.dbx2.MSSQLJDBC
port = 1433
jdbcUrlFormat =jdbc:sqlserver://<host>:<port>;databaseName=<database>
testQuery = SELECT 1 AS test

..\Splunk\etc\apps\splunk_app_db_connect\local\db_connections.conf
(this is mine just in case, I didn't need to make changes)

[yourDBName]
connection_type = sqlazure
database = yourDBName
host = yourDBServer
identity = yourIdentity
readonly = 1
disabled = 0
port = 1433

..\Splunk\etc\system\local\web.conf
add line

splunkdConnectionTimeout = 120

rubeniturrieta
Communicator

Thanks you very much 😄

0 Karma

mholme59
Explorer

Thank you, this helped me as well.

0 Karma

roopasree
Engager

@egcthistle ,@kamlesh_vaghela ,@niketnilay ,@ranjith_kumar @493669 @harishalipaka @FrankVl @rubeniturrieta @mholme59

Hi guys,

I am able to send data from splunk to sql server,
Now I need to send data from splunk to Azure portal Sql ,in this process what is the option to select connection type .

please suggest one link or document to send data from splunk to Azure SQL.
Thanks in advance.

0 Karma
Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...