Splunk DB Connect with FMC Database Access
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-20-2018 10:42 AM - edited 02-21-2020 07:39 AM
I've followed the steps to enable external database access for FMC successfully. Downloaded the client.zip too. After configuring custom database connection type at Splunk and adding a new connection. I encountered the following error at validation.
Does anyone have success in setting this up?
Validating connection with URL [jdbc:vjdbc:rmi//10.112.0.66:2000/VJdbc,eqe] failed: java.sql.SQLException:,Cannot create PoolableConnectionFactory (,Unknown protocol identifier rmi//10.112.0.66:2000/VJdbc,eqe at com.sourcefire.vjdbc.VirtualDriver.connect(VirtualDriver.java:125) at org.apache.commons.dbcp2.DriverConnectionFactory.createConnection(DriverConnectionFactory.java:39) at org.apache.commons.dbcp2.PoolableConnectionFactory.makeObject(PoolableConnectionFactory.java:205) at org.apache.commons.dbcp2.BasicDataSource.validateConnectionFactory(BasicDataSource.java:2165) at org.apache.commons.dbcp2.BasicDataSource.createPoolableConnectionFactory(BasicDataSource.java:2151) at org.apache.commons.dbcp2.BasicDataSource.createDataSource(BasicDataSource.java:1906) at org.apache.commons.dbcp2.BasicDataSource.getConnection(BasicDataSource.java:1416) at com.splunk.dbx2.Connector.getConnection(Connector.java:243) at com.splunk.dbx2.Connector.connect(Connector.java:160) at com.splunk.dbx2.Connector.isValid(Connector.java:307) at com.splunk.dbx2.DefaultDBX2JDBC.getConnectionStatus(DefaultDBX2JDBC.java:130) at com.splunk.dbx2.DBX2Proxy.getConnectionStatus(DBX2Proxy.java:64) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) at java.lang.reflect.Method.invoke(Unknown Source) at
- Labels:
-
NGFW Firewalls
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-20-2018 11:15 AM
I'll ask an expert for some guidance. But what kind of data are you trying to get off the FMC?
Doug
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-24-2018 08:17 AM
Looking at getting data from the "Intrusion Event", "Statistics Tracking", and "File Event" tables.
