After installing Splunk DB Connect 2.2.0 I'm getting
External search command 'dbxquery' returned error code 1. Script output = "AttributeError: 'dict' object has no attribute 'user'
independent from the database I'm using. (tried with SQL Server and DB2)
Connection setting says
Valid connection. Any idea why?
It has to do with the user permissions. Try assigning "dbconnectuser" role to the user (currently executing the query) directly from the Access controls » Users page. At least that is what resolve my problem.
Thank's for the hint, it was really a permission problem. It was difficult to find the solution because we use LDAP mapping for role assignment and any direct role assignment had no effect. The only way it worked was to change the LDAP mapping.
EDIT: nevermind, I found the solution here: https://answers.splunk.com/answers/406891/db-connect-220-not-working-in-shc.html
Hello Kissgery, how did you manage to solve it? I am having the same issue and adding "dbconnectuser" role to my user's custom role doesn't work but adding "dbconnectuser" in the user's inherited roles works. This is very strange. Do you remember what you changed in the LDAP mapping?
I'm getting this same error - I only need the users to be able to run dbxquery. Did you find a solution?
Hi cyndiback, the only solution we found (regardless of which permission is needed) to assign the rights over roles in LDAP mapping instead of doing it directly. (If you do not use LDAP for authentication this solution won't help you)