Release notes

Version 3.12.1 of Splunk DB Connect was released on Feb 23, 2023.

New and changed features

Version 3.12.1 of Splunk DB Connect contains the following new or changed features:

• Updated JDBC Driver Add-ons for Splunk DB Connect
• DB Connect requires Java 11 or higher, from version 3.12.0
• Troubleshooting tools for failures on startup, connections, and inputs
• Bug fixes

Fixed issues

Version 3.12.1 of Splunk DB Connect fixes the following issues. If no issues appear below, no issues have yet been fixed.

Date filed	Issue number	Description
2022-11-30	ADDON-58792	Database account get locked after password rotation
2022-12-08	ADDON-58967	Allow Inputs and Outputs names to contain dots characters

Date resolved	Issue number	Description
2022-12-22	DBX-5789	Allow Inputs and Outputs names to contain dots characters
2022-12-12	DBX-5790	Database account get locked after password rotation

Known issues

Version 3.12.1 of Splunk DB Connect contains the following known issues. If no issues appear below, no issues have yet been reported.

Date filed	Issue number	Description
2023-09-06	DBX-5812	Issues in the dbxlookup query having the '$' sign in it Workaround: Use replace command to avoid $ symbol | eval <field> = replace(<field> , "\\$" , "<DOLLAR-SYMBOL>"). Set the $ symbol again after the dbxlookup as | rex mode=sed field=<field> "s/<DOLLAR-SYMBOL>/$/g". Also, as a second way, you can ingest the data from databases into Splunk using DB Connect's Inputs feature and aggregate the data in the SPL query by using join command.
2023-05-26	DBX-5787	Inputs containing interval in a Non Standard cron expression cause failures Workaround: Splunk Modular Inputs only support Standard cron expressions, as DB Connect does. To fix the issue you can modify the cron expression for the affected Input in $SPLUNK_HOME/etc/apps/splunk_app_db_connect/local/inputs.conf and $SPLUNK_HOME/etc/apps/splunk_app_db_connect/local/db_inputs.conf, then restart Splunk. You can also fix it by following the steps below: Disable the Input. Adjust Interval to be a Standard cron expression. Enable the Input.
2023-04-17	DBX-5788	Not allow to edit the description field in the Input configuration
2023-03-23	DBX-5766	Unable to write records java.net.SocketTimeoutException: Read timed out Workaround: Set dedicatedIoThreads = 8 in $SPLUNK_HOME/etc/system/local/inputs.conf Allows the HEC to process multiple requests simultaneously, must not be greater than the number of CPU cores. Set parallelIngestionPipelines = 2 in $SPLUNK_HOME/etc/system/local/server.conf Multiple pipeline sets increase forwarder throughput and allow the forwarder to process multiple inputs simultaneously. Set batch_upload_size = 500 in $SPLUNK_HOME/etc/apps/splunk_app_db_connect/local/db_inputs.conf Number of rows to be uploaded to HEC in one batch. Set maxHecContentLength = 5242880 in $SPLUNK_HOME/etc/apps/splunk_app_db_connect/local/dbx_settings.conf Maximum size of each batch when uploading it to the HEC. Note: A patch will be released with version 3.12.2.
2023-03-21	DBX-5765	Unable to set "org" parameter for connection with InfluxDB Workaround: Instead of using the dedicated "Org" field on the left side of the UI, use the JDBC URL text field next to it. Input the org parameter along with the proper value in that field.

Third-party software attributions

Some of the components included in this add-on are licensed under free or open source licenses. We wish to thank the contributors to those projects.

A complete listing of third-party software information for this add-on is available as a Document file for download:
Splunk DB Connect third-party software credits.