All Apps and Add-ons

Why am I getting no results with Splunk DB Connect but with |dbquery I get results



I'm using Splunk DB Connect to connect Splunk with an MSSQL Database.

After I set identity and connection, I make an input.

With the |dbquery, I get my results but with the Host/Source/... I cannot see results.

I hope you can help.


0 Karma

New Member

Be sure to have the correct jdbc drivers and make sure they are installed in the correct location.

0 Karma


if you are using the DB Connect app to create your input you should be able to run it there and see what it returns.

Also, if the query is failing you should be able to see the return codes with index=_internal sourcetype=dbx_audit

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!