Install and configure Splunk DB Connect on a Splunk Cloud

Deploy DB Connect to Splunk Cloud Victoria Experience

If you want to deploy DB Connect to Victoria Experience, please see Install an add-on in Splunk Cloud for details. DB Connect on Victoria Experience must be deployed only on Search Head instances. Search Head instances on Victoria Experience will already have a supported version of JRE installed. If you install DB connect on a single instance then on search head will be offered full functionality. If DB Connect is installed on search head cluster environment please consider limitation for setting up DB connect on distributed environment describer in Performance considerations in distributed environments. Start the DB Connect installation process:

1. Outbound ports are closed by default on Victoria Experience. Splunk Cloud Platform provides the Admin Config Service (ACS) API which you can use to open ports to allow outbound network connections to specific IP subnets programmatically. For details on how to use the ACS API see ACS API Documentation
2. Follow the instructions to install DB Connect on a Search Head
3. Install a JDBC driver add-on for your database. See Install new drivers using JDBC Driver add-ons.

If an add-on is not available for your database, or you require a different version of the driver than provided by the add-on please contact Splunk Support for help.

1. After installing DB Connect and restarting Splunk, launch DB Connect.
2. Create a database identity and set up a database connection.
3. Create a new database input and use it as a data input in a Splunk search.

Migrate DB connect from Splunk Enterprise to Splunk Cloud Victoria Experience

DB Connect has differences in managing it on Splunk Cloud Victoria Experience. Below list prest those differences:

• Installing JDBC drivers other than served by JDBC Add-ons is not possible on Splunk Cloud Victorian Experience. In case of necessity of having other drivers idea need to be create on Idea Portal
• Migrate from Single Instance of Splunk Enterprise to Search Head Cluster environment in Victoria Experience consider limitation described in Performance considerations in distributed environments.
• Outbound ports on Splunk Cloud Victoria Experience are closed by default. It may prevent connecting to your database from Search Head with DB Connect installed. Please follow the instructions to open the Outbound port from Search Head to your Database. Splunk Cloud Platform provides the Admin Config Service (ACS) API which you can use to open ports to allow outbound network connections to specific IP subnets programmatically. For details on how to use the ACS API see ACS API Documentation.

Deploy DB Connect to Splunk Cloud Classic Experience

If you want to deploy DB Connect to Splunk Cloud, contact Splunk Support for guidance and assistance. You cannot deploy DB Connect yourself because you cannot configure network access to databases on your Splunk Cloud instance. See Install an add-on in Splunk Cloud for details.