Splunk DB Connect 2: Why am I getting "No rpc server enabled" running a dbxquery?

[pierre_weg]

Hi all!

I'm trying to set up the Splunk DB Connect 2 App.
I have a valid user that can make a select operation on a particular table, tested via SQL directly.
If I try the same query using the "Query" tab on my Connection, using "Advanced query mode" the App returns:

 External search command 'dbxquery' returned error code 1. Script output = " ERROR "Exception at ""/opt/splunk/etc/apps/splunk_app_db_connect/bin/dbxquery.py"", line 123 : No rpc server enabled" "

Can anyone help me?

[brucewpa]

is there any python version need?

[vprisiajni_splu]

The version that comes with Splunk is the baseline. This issue does not reside with the python script itself but rather with an incorrectly enabled inputs.conf flag as seen in the below answer.

[vprisiajni_splu]

Can you check the following path/stanza and verify that the disabled flag is set to 0?

%SPLUNK_HOME/etc/users/admin/splunk_app_db_connect/local/inputs.conf

[rpcstart://default]

[jkat54]

Check your SQL server logs for more details...

https://technet.microsoft.com/en-us/library/ms187885(v=sql.105).aspx

Are there any attempts to connect as the username you have provided db connect 2 with?

If so, then surely there is an error associated with the connection. What is the error?

If no records exists in SQL log, are there any in eventvwr.msc? Try application,system, and security logs. You're looking for any activity coming from the splunk server that has db connect.

[pierre_weg]

It's an Oracle 12c database, but I will check the logs and come back with the news.

[pierre_weg]

I look the Oracle log files (alert.log) and network (listener.log) but no errors was found at the connection moment.

[jkat54]

Are there any attempts to connect as the username you have provided dbconnect2?

[jkat54]

Same question here: https://answers.splunk.com/answers/332897/error-python-db-connect.html

Not answered yet though.