dbxquery command: external search exited unexpectedly

ankit13 — Mon, 24 Nov 2025 08:53:27 GMT

I am trying to integrate an Oracle database with Splunk using DB Connect. When I attempt to create an input in Data Lab and set the rising column as timestamp, I receive the following error:

“dbxquery command: External search command exited unexpectedly.”

I have already reviewed the related article, but the issue still persists. splunk db connect article

I am using Splunk DB Connect version 3.18.

The SQL query runs successfully and returns data when executed normally; the error occurs only when selecting a rising column.

I have searched the dbxquery logs in internal logs and its shows:

Re: dbxquery command: external search exited unexpectedly

victor_menezes — Wed, 26 Nov 2025 19:38:17 GMT

Hi @ankit13,

The issue may be on your checkpoint value format. Can you, just for an experimentation purpose, pick another field like a numerical one and use it just to see if the search loads?
If it does, then it is all about playing with the datetime format you are passing as initial checkpoint until you can get a format that is working.

Also, the second screenshot showing I/O Operation on a closed writer exception may be telling you that the connection died before returning the results and that is probably because, again, Checkpoint Value current format may be causing interpretation issues on the JDBC query against your database.

Another option is to run a profiler on the DB side to capture exactly how this request is hitting your DB. That would answer all of those questions.

topic Re: dbxquery command: external search exited unexpectedly in Security

dbxquery command: external search exited unexpectedly

Re: dbxquery command: external search exited unexpectedly