All Apps and Add-ons

Is it possible to connect Splunk DB Connect 2 works with an Azure SQL Database?

rubeniturrieta
Communicator

Hi guys,

I'm trying to connect Splunk DB Connect 2 with a SQL Azure database. Should this work? Are there any special considerations?

Any help will be grateful

Thank you

0 Karma
1 Solution

egcthistle
Explorer

Sure, though I had to make some changes/additions to various conf files to get this to work.

..\Splunk\etc\apps\splunk_app_db_connect\local\db_connection_types.conf
Add the following stanza

[sqlazure]
displayName = SQLAzure
useConnectionPool = false
jdbcDriverClass = com.microsoft.sqlserver.jdbc.SQLServerDriver
serviceClass = com.splunk.dbx2.MSSQLJDBC
port = 1433
jdbcUrlFormat =jdbc:sqlserver://<host>:<port>;databaseName=<database>
testQuery = SELECT 1 AS test

..\Splunk\etc\apps\splunk_app_db_connect\local\db_connections.conf
(this is mine just in case, I didn't need to make changes)

[yourDBName]
connection_type = sqlazure
database = yourDBName
host = yourDBServer
identity = yourIdentity
readonly = 1
disabled = 0
port = 1433

..\Splunk\etc\system\local\web.conf
add line

splunkdConnectionTimeout = 120

View solution in original post

egcthistle
Explorer

Sure, though I had to make some changes/additions to various conf files to get this to work.

..\Splunk\etc\apps\splunk_app_db_connect\local\db_connection_types.conf
Add the following stanza

[sqlazure]
displayName = SQLAzure
useConnectionPool = false
jdbcDriverClass = com.microsoft.sqlserver.jdbc.SQLServerDriver
serviceClass = com.splunk.dbx2.MSSQLJDBC
port = 1433
jdbcUrlFormat =jdbc:sqlserver://<host>:<port>;databaseName=<database>
testQuery = SELECT 1 AS test

..\Splunk\etc\apps\splunk_app_db_connect\local\db_connections.conf
(this is mine just in case, I didn't need to make changes)

[yourDBName]
connection_type = sqlazure
database = yourDBName
host = yourDBServer
identity = yourIdentity
readonly = 1
disabled = 0
port = 1433

..\Splunk\etc\system\local\web.conf
add line

splunkdConnectionTimeout = 120

rubeniturrieta
Communicator

Thanks you very much 😄

0 Karma

mholme59
Explorer

Thank you, this helped me as well.

0 Karma

roopasree
Engager

@egcthistle ,@kamlesh_vaghela ,@niketnilay ,@ranjith_kumar @493669 @harishalipaka @FrankVl @rubeniturrieta @mholme59

Hi guys,

I am able to send data from splunk to sql server,
Now I need to send data from splunk to Azure portal Sql ,in this process what is the option to select connection type .

please suggest one link or document to send data from splunk to Azure SQL.
Thanks in advance.

0 Karma
Get Updates on the Splunk Community!

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...