Why am I getting no results with Splunk DB Connect but with |dbquery I get results

[LH_SPLUNK]

Hi,

I'm using Splunk DB Connect to connect Splunk with an MSSQL Database.

After I set identity and connection, I make an input.

With the |dbquery, I get my results but with the Host/Source/... I cannot see results.

I hope you can help.

LH

[andrew_m_streic]

Be sure to have the correct jdbc drivers and make sure they are installed in the correct location.
http://docs.splunk.com/Documentation/DBX/3.1.3/DeployDBX/Installdatabasedrivers

[kmaron]

if you are using the DB Connect app to create your input you should be able to run it there and see what it returns.

Also, if the query is failing you should be able to see the return codes with index=_internal sourcetype=dbx_audit