All Apps and Add-ons

Why am I getting no results with Splunk DB Connect but with |dbquery I get results



I'm using Splunk DB Connect to connect Splunk with an MSSQL Database.

After I set identity and connection, I make an input.

With the |dbquery, I get my results but with the Host/Source/... I cannot see results.

I hope you can help.


0 Karma

New Member

Be sure to have the correct jdbc drivers and make sure they are installed in the correct location.

0 Karma


if you are using the DB Connect app to create your input you should be able to run it there and see what it returns.

Also, if the query is failing you should be able to see the return codes with index=_internal sourcetype=dbx_audit

0 Karma
Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!