[DB Connect] Prevent users from writing to database

[zyun]

Our deployment is currently looking to integrate the DB connect app to pull in data from the databases and to use in dashboards and so forth. However, we want the data to only be pulled from the database, with no writing or otherwise modifying the current data.

Is there a way to disable the export functionality directly? Or would we just have to set the service account created for the identity to have minimum read-access?

https://apps.splunk.com/apps/id/splunk_app_db_connect

[spayneort]

You can set the database connections to readonly in Splunk, but it is not guaranteed to work. It is recommended to limit access on the database itself.

https://docs.splunk.com/Documentation/DBX/3.2.0/DeployDBX/Configuresecurityandaccesscontrols#Read-on...

[anmolpatel · Accepted solution]

You should set the in your database. Create a service account for the identity to have read-access only