123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161 |
- <h3 class="page-heading">MS SQL connection</h3>
- <div class="gf-form-group">
- <div class="gf-form max-width-30">
- <span class="gf-form-label width-7">Host</span>
- <input type="text" class="gf-form-input" style="width: 352px" ng-model='ctrl.current.url' placeholder="localhost"
- bs-typeahead="{{['localhost', 'localhost:1433']}}" required></input>
- </div>
- <div class="gf-form max-width-30">
- <span class="gf-form-label width-7">Database</span>
- <input type="text" class="gf-form-input" style="width: 352px" ng-model='ctrl.current.database'
- placeholder="database name" required></input>
- </div>
- <div class="gf-form">
- <label class="gf-form-label width-7" for="auth-select">Authentication</label>
- <div class="gf-form-select-wrapper max-width-15 gf-form-select-wrapper--has-help-icon">
- <select id="auth-select" class="gf-form-input" ng-model="ctrl.current.jsonData.authenticationType"
- ng-options="mode for mode in ['Windows Authentication', 'SQL Server Authentication']"
- ng-init="ctrl.current.jsonData.authenticationType" ng-change="ctrl.onAuthenticationTypeChange()"></select>
- <info-popover mode="right-absolute">
- <ul>
- <li><i>SQL Server Authentication</i> This is the default mechanism to connect to MS SQL Server. Enter the SQL
- Server Authentication login or the Windows Authentication login in the DOMAIN\User format.</li>
- <li><i>Windows Authentication</i> Windows Integrated Security - single sign on for users who are already
- logged onto Windows and have enabled this option for MS SQL Server.</li>
- </ul>
- </info-popover>
- </div>
- </div>
- <div class="gf-form-inline" ng-show="ctrl.showUserCredentials">
- <div class="gf-form max-width-15">
- <span class="gf-form-label width-7">User</span>
- <input type="text" class="gf-form-input" ng-model='ctrl.current.user' placeholder="user"></input>
- </div>
- <div class="gf-form">
- <secret-form-field isConfigured="ctrl.current.secureJsonFields.password"
- value="ctrl.current.secureJsonData.password" on-reset="ctrl.onPasswordReset" on-change="ctrl.onPasswordChange"
- labelWidth="7" inputWidth="7" aria-label="'Password'" />
- </div>
- </div>
- </div>
- <h3 class="page-heading">TLS/SSL Auth</h3>
- <div class="gf-form-group">
- <div class="gf-form">
- <label class="gf-form-label width-15" for="encrypt-select">Encrypt</label>
- <div class="gf-form-select-wrapper max-width-15 gf-form-select-wrapper--has-help-icon">
- <select id="encrypt-select" class="gf-form-input" ng-model="ctrl.current.jsonData.encrypt"
- ng-options="mode for mode in ['disable', 'false', 'true']" ng-init="ctrl.current.jsonData.encrypt"
- ng-change="ctrl.onEncryptChange()" aria-labelledby="encrypt-label"></select>
- <info-popover mode="right-absolute">
- Determines whether or to which extent a secure SSL TCP/IP connection will be negotiated with the server.
- <ul>
- <li><i>disable</i> - Data sent between client and server is not encrypted.</li>
- <li><i>false</i> - Data sent between client and server is not encrypted beyond the login packet. (default)
- </li>
- <li><i>true</i> - Data sent between client and server is encrypted.</li>
- </ul>
- If you're using an older version of Microsoft SQL Server like 2008 and 2008R2 you may need to disable encryption
- to be able to connect.
- </info-popover>
- </div>
- </div>
- <div class="gf-form" ng-show="ctrl.showTlsConfig">
- <gf-form-switch class="gf-form" label="Skip TLS/SSL Verify" label-class="width-15"
- tooltip="Skip verifying Server Certificate for TLS/SSL. If this is enabled, any certificate presented by the server and any host name in that certificate will be accepted. In this mode, TLS is susceptible to man-in-the-middle attacks. This should be used only for testing."
- checked="ctrl.current.jsonData.tlsSkipVerify" switch-class="max-width-8" on-change="ctrl.onEncryptChange()">
- </gf-form-switch>
- </div>
- <div class="gf-form max-width-30" ng-show="ctrl.showCertificateConfig">
- <span class="gf-form-label width-15">TLS/SSL Root Certificate</span>
- <input type="text" class="gf-form-input" style="width: 352px" ng-model='ctrl.current.jsonData.sslRootCertFile'
- placeholder="TLS/SSL root certificate file"></input>
- <info-popover mode="right-absolute">
- Path to file containing the public key certificate of the CA that signed the SQL Server certificate. Needed when
- the server certificate is self signed.
- </info-popover>
- </div>
- <div class="gf-form max-width-30" ng-show="ctrl.showCertificateConfig">
- <span class="gf-form-label width-15">Hostname in server certificate</span>
- <input type="text" class="gf-form-input" style="width: 352px" ng-model='ctrl.current.jsonData.serverName'
- placeholder="Common Name (CN) in server certificate"></input>
- <info-popover mode="right-absolute">
- Specifies the Common Name (CN) in the server certificate. Default is the server host.
- </info-popover>
- </div>
- </div>
- <h3 class="page-heading">Connection limits</h3>
- <div class="gf-form-group">
- <div class="gf-form max-width-15">
- <span class="gf-form-label width-7">Max open</span>
- <input type="number" min="0" class="gf-form-input gf-form-input--has-help-icon"
- ng-model="ctrl.current.jsonData.maxOpenConns" placeholder="unlimited"></input>
- <info-popover mode="right-absolute">
- The maximum number of open connections to the database. If <i>Max idle connections</i> is greater than 0 and the
- <i>Max open connections</i> is less than <i>Max idle connections</i>, then <i>Max idle connections</i> will be
- reduced to match the <i>Max open connections</i> limit. If set to 0, there is no limit on the number of open
- connections.
- </info-popover>
- </div>
- <div class="gf-form max-width-15">
- <span class="gf-form-label width-7">Max idle</span>
- <input type="number" min="0" class="gf-form-input gf-form-input--has-help-icon"
- ng-model="ctrl.current.jsonData.maxIdleConns" placeholder="2"></input>
- <info-popover mode="right-absolute">
- The maximum number of connections in the idle connection pool. If <i>Max open connections</i> is greater than 0
- but
- less than the <i>Max idle connections</i>, then the <i>Max idle connections</i> will be reduced to match the
- <i>Max open connections</i> limit. If set to 0, no idle connections are retained.
- </info-popover>
- </div>
- <div class="gf-form max-width-15">
- <span class="gf-form-label width-7">Max lifetime</span>
- <input type="number" min="0" class="gf-form-input gf-form-input--has-help-icon"
- ng-model="ctrl.current.jsonData.connMaxLifetime" placeholder="14400"></input>
- <info-popover mode="right-absolute">
- The maximum amount of time in seconds a connection may be reused. If set to 0, connections are reused forever.
- </info-popover>
- </div>
- </div>
- <h3 class="page-heading">MS SQL details</h3>
- <div class="gf-form-group">
- <div class="gf-form-inline">
- <div class="gf-form">
- <span class="gf-form-label width-9">Min time interval</span>
- <input type="text" class="gf-form-input width-6 gf-form-input--has-help-icon"
- ng-model="ctrl.current.jsonData.timeInterval" spellcheck='false' placeholder="1m"
- ng-pattern="/^\d+(ms|[Mwdhmsy])$/"></input>
- <info-popover mode="right-absolute">
- A lower limit for the auto group by time interval. Recommended to be set to write frequency,
- for example <code>1m</code> if your data is written every minute.
- </info-popover>
- </div>
- </div>
- </div>
- <div class="gf-form-group">
- <div class="grafana-info-box">
- <h5>User Permission</h5>
- <p>
- The database user should only be granted SELECT permissions on the specified database and tables you want to
- query.
- Grafana does not validate that queries are safe so queries can contain any SQL statement. For example, statements
- like <code>USE otherdb;</code> and <code>DROP TABLE user;</code> would be executed. To protect against this we
- <emphasis>highly</emphasis> recommmend you create a specific MS SQL user with restricted permissions.
- </p>
- </div>
- </div>
|