All Apps and Add-ons

db connect -> connection failed for user xxxxxx

dbiguene
New Member

Hello everyone,
I need to connect my Splunk with a SQL database, so I downloaded DB connect.
I defined a, identity
-username : my_SQL_account
-pwd : my_SQL_account_mdp
I checked the "use Windows Authentication" and indicated the domain's name.

After that , I defined a connection with my identity,
type connection : MY-SQL server using MS generic driver with wwindows authentication
host : My_SQL_database_adress
Port : 1435 (telnet work)
default database : the name of my database

And I have this message : "connection failed for user xxxxxxx"
xxxxxxx : my ip

I tried this http://docs.splunk.com/Documentation/DBX/3.1.3/DeployDBX/Installdatabasedrivers#Install_the_SQL_Serv...
and don't work for me.
I tried this :
http://docs.splunk.com/Documentation/DBX/2.0.1/DeployDBX/Troubleshooting#Can.27t_use_Windows_authent...
But, there is something i dont understand, when i try the step 5,after the change of LogOn, i restart splunk and the task server don't work, it's worse. What i'm supposed to do with the step 5?
Or there is an antoher problem?

Thanks

0 Karma

dbiguene
New Member

Alright, that works.
The problem did not come neither from Splunk DB Connect nor from the connection's configuration
It came from the SQL Server Database, so the SQL team solved the problem.

Thanks for your help

0 Karma

joebisesi
Path Finder

Is the jTDS Driver?
On the logon issue, does the user that you are replacing 'Local Service' have the appropriate rights to start a service? Meaning is the splunkd service starting?
Try running command prompt as Administrator. cd to the Splunk>bin directory, and run splunk restart. Watch the input for any config errors or if the splunkd service fails to start. Make sure you are running the cmd prompt as "Administrator".

If you can get everything up and running and are still having the connection issue, here is how mine is configured:
jdbc:jtds:sqlserver://host:port/;instance=;useCursors=true;domain=;useNTLMv2=true
I believe that SQL by default uses port 1433 as its initial port for logging in.

0 Karma

dbiguene
New Member

I tried with MS Generic Driver, I will try with Jtds but I have to wait an answer about my whitelist request (where I work, the link to download jtds is not in the whitelist, so it's blocked).
I'm pretty sure that the user can start a service, I already restart the splunkd service many times.

0 Karma

dbiguene
New Member

Same issue with Jtds

0 Karma

joebisesi
Path Finder

Same issue being, task server fails to start or connection failed for user: xxx ?

0 Karma

ansif
Motivator

Try "MS-SQL Server Using jTDS Driver With Windows Authentication" for sql DB.

jdbcUrlFormat = jdbc:jtds:sqlserver://<host>:<port>/<database>;useCursors=true;domain=<domain_name>;useNTLMv2=true
0 Karma

dbiguene
New Member

Thanks for your answer !
I can't try your idea right now, the download link is blocked where I work, so I have to make a request and I don't konw the treatment's delay.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...