ERROR :The internal search "| dbinfo database="" type=schemas | sort -default | eval label=if(isnull(default),schema,schema+" (default)")" for the "Splunk.Module.SearchSelectLister" module failed.

[shivasn]

when using splunk db connect v1 app browse through tables and views i select the database and it throws the error:
The internal search "| dbinfo database="" type=schemas | sort -default | eval label=if(isnull(default),schema,schema+" (default)")" for the "Splunk.Module.SearchSelectLister" module failed.

[shivasn · Accepted solution]

i just reinstalled splunk and it worked

[pmdba]

From the error message it appears that the database name is not being passed to the search. The search should contain something like

database="dbname"

not a null value for the database. I'm not sure what would cause this to happen, but you might want to check your database.conf file and make sure the connection is defined correctly.

[shivasn]

thx for the reply i have checked conf file and the database name is also correct but still it throws error

[harsmarvania57]

Do you have schemas in your database?? If yes then splunk users have permission to those schemas??

[shivasn]

no but still it throws error on choosing a database