Connection SPLUNK to MEMCM

Dominique DUCHEMIN 831 Reputation points
2020-12-18T23:27:11.41+00:00

Hello,

I have MEMCM 2006 and I have Windows Authentication on the SQL Server hosting the SCCM Database CM_UCT...

I am trying to make a DBConnect link with Splunk using a jdbc string with Windows Authentication across the two domains.

The splunk server is in the domain AD

jdbc:sqlserver://10.16.102.120:1433;InstanceName:Configmgr;databaseName=CM_UCT;Domain=adtest;

but I cannot connect ...

The user account used is svc_ConfigMgr_SQL from adtest domain.
How to control the account used? the server name used? I am asking this as the service exist in several domains and I would like to confirm the one used is the one for the destination machine(SCCM Test) not from the origin machine (splunk)...

Any idea.
Thanks,
Dom

Microsoft Security Intune Configuration Manager Other
0 comments No comments
{count} votes

Accepted answer
  1. Dominique DUCHEMIN 831 Reputation points
    2020-12-23T19:11:17.54+00:00

    Thanks,
    The resolution was using a jtds connection...
    Connection String: jdbc:jtds:sqlserver://VITSCCMCB.ADTEST:1433/CM_UCT;useCursors=true;domain=<domain_name>;useNTLMv2=true

    Thanks,
    Dom


1 additional answer

Sort by: Most helpful
  1. Garth Jones 2,076 Reputation points
    2020-12-19T00:43:38.33+00:00

    This is a question for splunk. They will know the answer.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.