All Apps and Add-ons

Splunk DB Connect: What is the needed connection and host type for a 2016 SQL server?

raghu0463
Explorer

Hi,
In Setting up Splunk DB Connect and I have a question :

I was trying to connect from Splunk Db Connect App to SQL server 2016. I have installed both on same system with windows OS. I have downloaded the JDBC driver 'sqljdbc42' and I have copied this file in the location
"C:\Program Files\Splunk\etc\apps\splunk_app_db_connect\drivers "
but the document says to copy in this path "$SPLUNK_HOME/etc/apps/dbx/bin/lib " Is this path same as the path where I have copied ??
when I was trying to create connection what Is the connection type I need to mention please?
In the host column do I need to give sql server Ip Address and port number ?

For setting up db connection I followed the documentation and I have tried, but I got an error, below are the details what I have tried :

I have created an identity, For identities I created a user in sql server with sql server authentication and I used the same in identities

I used the connection type : MS-SQL server using MS generic Driver with windows connection ---
and for host I used my system Ip address and port as 1433
I have got the below error I got when I used above credentials

"this driver is not configured for integrated authentication. ClientConnectionId:e5f8a091-7f5a-4557-99a2-686006288fd8"

natejenkins
Explorer

Integrated authentication is still an issue. Either the documentation misses a few steps or db connect is using the driver incorrectly.

Best work around is to disable windows authentication, create a sql server username and password on the DB, use the MS-Generic Driver (without Windows Auth), and send the username and password in the query.
Side note for username: I believe the username still must include the domain. Ex. (MyDomain\Username)

0 Karma

esix_splunk
Splunk Employee
Splunk Employee

Your connection is fine, right now the issue is authentication back to MS, looks like you are using integrated authentication.

I'd start by looking here : https://answers.splunk.com/answers/234258/db-connect-2-connection-is-not-using-integrated-au.html and
here : https://answers.splunk.com/answers/334028/splunk-db-connect-2-why-am-i-getting-this-driver-i.html

Follow that up with reading the Troubleshooting of DB Connect docs here :

http://docs.splunk.com/Documentation/DBX/3.1.1/DeployDBX/Troubleshooting#Cannot_connect_to_Microsoft...

Let us know if this helps..

0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...