Splunk DB Connect was disabled in an effort to find out why we were exceeding our license based indexing quota. When DB Connect was enabled again and Splunk was restarted, the ID and Connection were present, but the Connection reported an Internal Service Error. I am unable to create a new connection or delete the old one. Settings reports:
In handler 'rpcserver': Unexpected error "" from python handler: "[HTTP 403] Client is not authorized to perform requested action; https://127.0.0.1:8089/servicesNS/-/splunk_app_db_connect/data/inputs/rpcstart/default". See splunkd.log for more details.
Any help would be greatly appreciated.
↧