command="dbquery", A database error occurred: The user does not have permission to perform this action.

[d12harshal]

Hi Everyone,
While performing dbinfo, dbquery commands in the database for few tables I am getting following error message.
command="dbquery", A database error occurred: The user does not have permission to perform this action.

Thanks in Advance.

[richgalloway · Accepted solution]

Check your External Databases configuration and make sure the username and password are correct. Then check the database to make sure that user is allowed access to those tables. If you use MySQL, make sure access is granted to the user accessing from the Splunk server.

[richgalloway]

See a212830's comment. If that doesn't solve your problem then check the MSSQL permissions.

[d12harshal]

There are 500 plus tables and I unable to access only few, configuration, username and password are correct only. You want me to check in MSSQL whether access is granted to respective tables?

Thank You.

[a212830]

You need to update permissions on the db connect config file. Do a search on splunk answers, and you’ll see examples.