All Apps and Add-ons

Splunk DB Connect: Why does our search not populate table names present on our Oracle database?

herinj
New Member

Hi!
An Oracle and Splunk DB Connect valid connection has been established. But when i am trying to query on the db, it doesn't populate the table names which are present on our Oracle DB. It mainly shows the system tables.
Table names which we are expecting are like customer details, user details, etc. So could someone please help me out in understanding where i'm going wrong?

Br,
Herin

0 Karma

pmdba
Builder

Hopefully you have resolved this since it has been a few months from your original post, but just in case, is the database user that Splunk connects as able to see the tables? In other words, if you connect to tha account with a different tool like SQL*Plus or SQL*Developer, can you see the tables you expect? This sounds like a permissions issue.

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...