topic Re: Error in 'dbxquery' command: External search command exited unexpectedly with non-zero error code 1. in All Apps and Add-ons

Error in 'dbxquery' command: External search command exited unexpectedly with non-zero error code 1

rapmancz — Tue, 05 Jul 2022 16:06:17 GMT

Hello, I am getting "Error in 'dbxquery' command: External search command exited unexpectedly with non-zero error code 1." for every search in Splunk DB connect app. Already configured inputs are indexed, but when I try to run any searches by hand, I always get this failure. I can not also add any new input.

I am using Splunk DB connect 3.4.2 with MySQL database. The data is indexed so I am sure the connection is working, I can also select

Re: Error in 'dbxquery' command: External search command exited unexpectedly with non-zero error code 1.

hpbrand — Tue, 23 Mar 2021 14:19:28 GMT

Hi, had the same problem. After weeks of troubleshooting I found following entry under default/commands.conf

####### uncomment following lines to revert dbxquery to 3.2.0 version
# [dbxquery]
# run_in_preview = false
# filename = java.path
# chunked = true
# command.arg.1 = -Dlogback.configurationFile=../config/command_logback.xml
# command.arg.2 = -DDBX_COMMAND_LOG_LEVEL=INFO
# command.arg.3 = -cp
# command.arg.4 = ../jars/dbxquery.jar
# command.arg.5 = com.splunk.dbx.command.DbxQueryCommand

Gave it a try and copied all over to local/commands.conf and it works.

Re: Error in 'dbxquery' command: External search command exited unexpectedly with non-zero error code 1.

rahmatn — Wed, 14 Apr 2021 08:51:31 GMT

in my case just put "#" in front of

[dbxquery]

filename = java.path

in local/commands.conf

Re: Error in 'dbxquery' command: External search command exited unexpectedly with non-zero error code 1.

AshChakor — Fri, 14 May 2021 13:16:16 GMT

I am getting same error after upgrading to Splunk 8.1.3 version. we don't have commands.conf under local. Any suggestions please?

Thanks in advance!

Re: Error in 'dbxquery' command: External search command exited unexpectedly with non-zero error code 1.

rahmatn — Tue, 18 May 2021 09:56:12 GMT

Have you find it under default ?

Re: Error in 'dbxquery' command: External search command exited unexpectedly with non-zero error code 1.

thuhuongle — Thu, 16 Sep 2021 10:08:41 GMT

Hi,
I have faces the same error with version 3.4.0. After verification installed drivers (JDBC connetion and java home path). We did upgrade to 3.6.0 and restart Splunk. Problem resoved.

Re: Error in 'dbxquery' command: External search command exited unexpectedly with non-zero error code 1.

martaBenedetti — Thu, 07 Apr 2022 08:15:10 GMT

Same problem, worked for me!

Thanks a lot rahmatn!

Re: Error in 'dbxquery' command: External search command exited unexpectedly with non-zero error code 1.

resmungo — Fri, 17 Jun 2022 13:47:18 GMT

Same here. Thank you!

Re: Error in 'dbxquery' command: External search command exited unexpectedly with non-zero error code 1.

FreelanceRob — Tue, 05 Jul 2022 08:15:26 GMT

Solved! Thank you very much!

Re: Error in 'dbxquery' command: External search command exited unexpectedly with non-zero error code 1

David888 — Thu, 03 Oct 2024 20:51:04 GMT

I had this issue today. I tried the few things suggested here. None fixed my problem. I looked in the _internal index for possible error messages. I found "The certificate chain length (11) exceeds the maximum allowed length (10)"

I changed the limit to 15 and my issue was fixed.
Under Configurations -> Setting -> Query Server JVM Options
I entered -Djdk.tls.maxCertificateChainLength=15

--Hope this helps