Database connection unsuccessful: Failed to connect - What certificate is it using?
Answers
-
User ID is what they had
0 -
so assumed it was good
0 -
also verified that my db connect connection to the same server is not using a secured connection but according to my Palo logs, the Cribl Stream box is using mssql-db-encrypted
0 -
doubt that is my issue though
0 -
great conversations here, thanks
0 -
I see both cases are used without issue on that page :slightly_smiling_face: so nevermind.
0 -
Probably a good idea to link to those docs from ours so that users know all the options, etc. that are supported.
0 -
You could try adding Integrated Security=false and Trusted_Connection=false (or just one of it)
0 -
Is your DBConnect on a windows box?
0 -
nope db connect is on a Linux box
0 -
ok spun up a different test Cribl Stream box on same network as mostof my SQL servers. i have a successful connection to a different SQL server so the one with the untrusted domain one must have a weird requirement on it. Anyway, for database collection, what is the proper javascript expression that contains my SQL query in it? Would be nice for the docs to have some generic examples
0 -
you can just do a regular query in here! something like `SELECT * from database.table WHERE column = whatever`. you can use `${earliest}` and `${latest}` if you want to leverage the Collector's start and end times
0 -
I can work on updating the docs with a simple example
0 -
tried a normal SQL query and it complained, i wll try again
0 -
can you provide the query?
0 -
yeah hang on
0 -
SELECT * FROM "database"."dbo"."table" Even if i remove the quotes, it tells me Unexpected identifier 'database'
0 -
did you wrap the entire thing in ` ` ?
0 -
did not know i needed that
0 -
:slightly_smiling_face: Those quotes again!
0 -
where do earliest and latest go
0 -
that field is a js expression field (blue vertical bar) so the backticks are necessary
0 -
``SELECT * FROM "database"."dbo"."table" where <fieldname> > ${earliest} and <fieldname> < ${latest}``
0 -
and earliest and latest come from the values i put when running the collector, right?
0 -
yes
0 -
cool thanks
0 -
i am guessing all our complex MS SQL queries (lots of joins and such) is not going to work since the docs mention SELECT is all that is supported?
0 -
well, a JOIN is part of a SELECT statement, JOINs aren't their own. The intent there in the docs is to not try using a DELETE or INSERT.
0 -
ah ok
0 -
i will try out one of our complex queries in a few
0
