All Apps and Add-ons

Getinfo probe failed for external search command 'dbxquery'

cjj1977
Path Finder

I am running DBConnect v2.3.0. As of last night, dbxquery searches stopped working. When running a query I see:

Error in 'script': Getinfo probe failed for external search command 'dbxquery'

When I open the app I cannot bring up any identiy/connection/input details on the Explorer or Operations tabs. It just hangs with Loading... in the right-hand pane.

I can use the Health, Settings and Search tabs fine. Using the Health tab, I notice that the Number of Transactions over Time dropped off significantly at midnight last night. There are no connection errors, apparently.

I notice that my java.exe process is consuming approx. 1.4GB memory. I know this isn't the real story about how memory is being used within the JRE, but it does seem rather high none-the-less.

I am not aware of anything changing overnight.


Question

My gut feeling is that a restart of the app (i.e. java process) might be helpful. How can I do this without restarting the whole search head?

0 Karma
1 Solution

cjj1977
Path Finder

Performing a /debug/refresh seemed to resolve the problem without restarting splunkd itself.

This looks like a stability issue in this version of DB Connect. I notice that version 2.3.1 has now been released so it may be that this has been fixed.

View solution in original post

0 Karma

cjj1977
Path Finder

Performing a /debug/refresh seemed to resolve the problem without restarting splunkd itself.

This looks like a stability issue in this version of DB Connect. I notice that version 2.3.1 has now been released so it may be that this has been fixed.

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...