All Apps and Add-ons

Unknown search command 'dbxquery'

cscaldeira
Explorer

Hi. I am trying to use dqxquery following the Splunk DB Connect 2 documentation but I am having no success. http://docs.splunk.com/Documentation/DBX/latest/DeployDBX/Commands.

When I try to run dbxquery from Splunk Console it replies back with: "Unknown search command 'dbxquery'."

Anyone knows why?
One more question: To use dbxquery do I have to create DB Input for every single table that I want to use?

Thanks.

Tags (1)
1 Solution

jnussbaum_splun
Splunk Employee
Splunk Employee

By default, the | dbxquery command will need to be ran from "search" within the Splunk DB Connect v2 App.

View solution in original post

0 Karma

slr
Communicator

Is true, by default the dbxquery command only run within the Splunk DB Connect v2 App, but if you go to "Manage Apps" and you change the "Permissions" to "All apps", you will can use it in any other app.

I mislead the second question, sorry: with a DB Input you can use only one "query", but if you use this syntax: SELECT * FROM `DataBase`.`table` you can do any query to any DB that your identity has access. Another option, you can create a new DB Connection with a different default DB, and then use this new connection in a new query/DBinput.

Regards.

napomokoetle
Communicator

Makes sense. Thanks!

0 Karma

jnussbaum_splun
Splunk Employee
Splunk Employee

By default, the | dbxquery command will need to be ran from "search" within the Splunk DB Connect v2 App.

0 Karma

napomokoetle
Communicator

I also need to excute the DBXQUERY outside the DB Connect v2 App. Is this at all possible? If so, how does one enable it. I've right many permission configs that didn't help. Thanks!

0 Karma

cscaldeira
Explorer

You mean, I can not use this command on normal Splunk console. Need to use it on Db operations right!
I could use it on DB Input

0 Karma

tdiestel
Path Finder

@jnussbaum when you say "By default", does that mean we can change a setting to run |dbxquery from another app? I would love to use the |dbxquery on one of my dashboards that's not in the Splunk DB Connect v2 App and was wondering how to do that.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...