November 2018
Beginner
298 pages
7h 51m
English
At the time of writing, the current version of Splunk DB Connect is 3.1.3. In previous (2.x) versions of DB Connect, the app could be installed on all the search heads in a cluster, and the captain would assume the role of actually performing the database queries; this sometimes resulted in performance and reliability issues if the search heads got too busy, so as of version 3.x, Splunk started enforcing the need to install DB Connect on a standalone node such as a heavy forwarder. You can still install DB Connect on clustered search heads to allow users to perform ad-hoc database queries, but if you want to configure it to perform scheduled queries or output, you'll need to install it on a heavy forwarder or, ...
Read now
Unlock full access