I've used this config before: connector.class=com.splunk.kafka.connect.SplunkSinkConnector key.converter.schemas.enable=false topics=payments name=SplunkTest2 value.converter.schemas.enable=false value.converter=org.apache.kafka.connect.json.JsonConverter key.converter=org.apache.kafka.connect.storage.StringConverter splunk.hec.token=92933e00-0adf-424d-ace4-96e07f47bba9 splunk.hec.uri=http://somehost.compute.amazonaws.com:8088 I highly recommend using Lenses.io to manage Kafka and Kafka Connect. See this little example vid tutorial: https://www.youtube.com/watch?v=cnKHhE8ApPA& ... View more

You could consume data from Kafka via a Splunk search without indexing the data by proxying through Lenses.io (It's a secure access layer for Apache Kafka which avoids you have to point directly to Kafka brokers and managing ACLs). See: https://lenses.io/blog/2020/05/new-kafka-governance-approval-flows-app-topology/ ... View more

Thanks. But are we saying we need to put a reverse proxy in front of SplunkWeb for this to work? It seems overkill for something so basic. It seems that SplunkWeb just isn't taking the correct base host & port as defined in tools.proxy.base in the web.conf ... View more

I have same problem when using the Lenses.io SQL Driver (https://docs.lenses.io/dev/jdbc/index.html) 2020-04-19 14:13:12.856 +0000 [dw-57 - POST /api/connections/status] ERROR io.dropwizard.jersey.errors.LoggingExceptionMapper - Error handling a request: 103747235521985d java.lang.NullPointerException: null at com.splunk.dbx.connector.logger.AuditLogger.replace(AuditLogger.java:50) at com.splunk.dbx.connector.logger.AuditLogger.error(AuditLogger.java:44) at com.splunk.dbx.server.api.service.database.impl.DatabaseMetadataServiceImpl.getStatus(DatabaseMetadataServiceImpl.java:159) at com.splunk.dbx.server.api.service.database.impl.DatabaseMetadataServiceImpl.getConnectionStatus(DatabaseMetadataServiceImpl.java:116) at com.splunk.dbx.server.api.resource.ConnectionResource.getConnectionStatusOfEntity(ConnectionResource.java:72) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.glassfish.jersey.server.model.internal.ResourceMethodInvocationHandlerFactory.lambda$static$0(ResourceMethodInvocationHandlerFactory.java:52) at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher$1.run(AbstractJavaResourceMethodDispatcher.java:124) at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.invoke(AbstractJavaResourceMethodDispatcher.java:167) at org.glassfish.jersey.server.model.internal.JavaResourceMethodDispatcherProvider$TypeOutInvoker.doDispatch(JavaResourceMethodDispatcherProvider.java:219) I just can't the driver to appear as installed with db_connection_types.conf : [lenses-jdbc] displayName = LensesJdbc serviceClass = com.splunk.dbx2.DefaultDBX2JDBC jdbcDriverClass = io.lenses.jdbc4.LensesDriver jdbcUrlFormat = jdbc:lsql:kafka:http://<host>:<port> testQuery = SELECT amount FROM cc_payments LIMIT 1 database = na ... View more

Am I missing something here. I submit eai:data and I get: In handler 'views': Argument "eai:data" is not supported by this handler. The curl I'm running is: curl -v -H "Content-Type: application/xml" -X POST -d name=test00013210 -d eai:data=%3Cdashboard%20%2F%3E -u admin:changeme -k hxxps://localhost:8091/servicesNS/admin/search/data/ui/views/_new ... View more