All Apps and Add-ons

DB Connect SQL Explorer Not Working

alonsocaio
Contributor

Hi,

I am trying to run some SQL queries using SQL Explorer on DB Connect app, but It looks like the queries are not finishing. Every query I execute keeps on 20% of completion and does not load any result.

Also, all of my inputs that are configured on DB Connect app are working as expected, the issue is happening only when I try configuring new inputs or when I use the SQL Explorer tab.

I have already tried to run the queries using different users and browsers, and I have already restarted Splunk service, but the issue is still occurring.

Does anyone has ever faced some issue like this one before on Db Connect? Any tips on what can be the cause of this error?

Thanks in advance.

Labels (2)
Tags (1)
0 Karma
1 Solution

alonsocaio
Contributor

I was able to solve this issue by setting the dbxquery stanza under local/commands.conf

This stanza is commented under default/commands.conf, I had to add this to local so I could revert dbxquery to version 3.2.0

[dbxquery]
run_in_preview = false
filename = java.path
chunked = true
command.arg.1 = -Dlogback.configurationFile=../config/command_logback.xml
command.arg.2 = -DDBX_COMMAND_LOG_LEVEL=INFO
command.arg.3 = -cp
command.arg.4 = ../jars/dbxquery.jar
command.arg.5 = com.splunk.dbx.command.DbxQueryCommand

The solution was found on the following question: Splunk DB connect DBX Query error - Splunk Community

View solution in original post

0 Karma

alonsocaio
Contributor

I was able to solve this issue by setting the dbxquery stanza under local/commands.conf

This stanza is commented under default/commands.conf, I had to add this to local so I could revert dbxquery to version 3.2.0

[dbxquery]
run_in_preview = false
filename = java.path
chunked = true
command.arg.1 = -Dlogback.configurationFile=../config/command_logback.xml
command.arg.2 = -DDBX_COMMAND_LOG_LEVEL=INFO
command.arg.3 = -cp
command.arg.4 = ../jars/dbxquery.jar
command.arg.5 = com.splunk.dbx.command.DbxQueryCommand

The solution was found on the following question: Splunk DB connect DBX Query error - Splunk Community

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Trusted Autonomy in the SOC: A Maturity Journey

AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC ...

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...

Enriching Signals with the OTel Lookup Processor

Introduction Raw telemetry is often incomplete. A log line might record an IP address, but what you really ...