All Apps and Add-ons

Why doesn't my DB Connect 2 Health section show any data ever since I changed my connection?

chustar
Path Finder

I recently changed my DB Connect 2 connection to point at a new Database. To do this, I created a new Connection with the settings for my new database, and changed my DBInput to use the new Connection.
After making these changes, I can see new data being read from my new connection, however, the Health tab doesn't show any information on this new connection or its transactions.

I thought this could be caused by my changing to use a custom index but I've made that index searchable by default for all users with no luck.
Does anyone know what could be causing this or where I can look for more information?

Additionally, I ran this query from the Health Dashboard:

 | tstats dc(All_Records.CONNECTION) from datamodel=DB_Health groupby "All_Records.CONNECTION" | `rename_all`

And it shows only the old connection in there. Is there a way to trigger it to rebuild its datamodel?

0 Karma

bwang_splunk
Splunk Employee
Splunk Employee

DB_health model search the log based on : sourcetype=dbx_health index=_internal

You can check if running this search on your indexer to see if new log contains your new connection information. If it does, tstats should pick it up.

0 Karma

bworrellZP
Communicator

Any solution to this? I am having the same exact issue.

0 Karma

chustar
Path Finder

I checked again today and when I run that search, I can see more recent events, but they still do NOT show up in the Health section.

The one difference I noticed is that the old events in the Health dashboard were logged by [health.py] and contain a connection name, while the newer events were logged by HealthLogger, and do not contain an explicit Connection field.

0 Karma

chustar
Path Finder

Thanks for the pointer. Looking in that search it looks like the connection info is set in health.py but there hasn't been any events from health.py since I switched the servers over.

Does this mean that tie health.py file is no longer being triggered, and if so, how can I restart it?

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...