All Apps and Add-ons

Configure DB Connect App Programatically

rfitch
Path Finder

I'd like to add and remove DB Connect configurations programatically. Has anyone tried this? I'm guessing I can just add / remove entries to the db_connections.conf, inputs.conf, and identities.conf.

For the identities.conf, if I put the password in there plain text, will Splunk hash it for me, or is there a way I can do that ahead of time?

0 Karma

jcoates_splunk
Splunk Employee
Splunk Employee

I'd advise using DB Connect 3 if you're going to use automatic configuration. The different types of inputs are separated into different files, rising column checkpoints are separated into a different location, and SQL parsing is strictly WYSIWYG. One gotcha in 3.0.0 is that you've got to "seed" the rising column file in your script.

0 Karma

rfitch
Path Finder

Found the answer, credentials can be added using curl.

https://docs.splunk.com/Documentation/DBX/2.4.0/DeployDBX/javaspec

0 Karma

sloshburch
Splunk Employee
Splunk Employee

Alternatively, I wonder if there's a REST api that you can use for generating the new connection. That's because typically conf file updates require a restart of splunkd while REST calls often do not.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...