I am running Splunk 7.0.0 with dbConnect 3.1.1 for access to a MySQL database. A few days ago I was able to retrieve data from the database with the SQL Explorer, but after coming back the following day, the SQL Explorer is now returning the following error
"Error in 'dbxquery' command: Invalid message received from external search command during setup, see search.log."
The search log shows as follows.
01-06-2018 18:45:07.464 INFO ChunkedExternProcessor - Running process: /opt/splunk/etc/apps/splunk_app_db_connect/linux_x86_64/bin/command.sh -Dlogback.configurationFile\=../config/command_logback.xml -DDBX_COMMAND_LOG_LEVEL\=DEBUG -cp ../jars/command.jar com.splunk.dbx.command.DbxQueryCommand
01-06-2018 18:45:07.466 ERROR ChunkedExternProcessor - Failure starting process
01-06-2018 18:45:07.466 ERROR ChunkedExternProcessor - Error in 'dbxquery' command: Invalid message received from external search command during setup, see search.log.
I have searched through this forum and the solution suggested is just to downgrade dbConnect to previous version. Doesn´t seem like a "solution" to me. From the dbConnect page, 7.0 is said to be compatible. Have also noted another user running 7.0 with 3.1.1 on 6 out of 7 servers, so clearly seems that it should be possible to make this work.
Anyone having any ideas at all? Is this product perhaps not ready for prime?
↧