db query access

[a212830]

Hi,

How do I give access to the dbquery command to users via DB Connect? It works for admin, but nobody else. When a power user attempts the same query, it says "unknown search command"

[barakreeves]

Great question. You will need to do some additional configuration. Essentially, you will need to edit the $SPLUNK_HOME/etc/apps/dbx/metadata/local.meta file to provide additional permissions to non-admins.

Here are some links that will point you in the right direction.

http://splunk-base.splunk.com/answers/76006/dbquery-command-permissions
http://docs.splunk.com/Documentation/DBX/1.0.9/DeployDBX/Securityandaccesscontrols

[barakreeves]

I'm glad it worked. Yes. Of course, this type of "security" is no substitute for db server security. The doco link I gave you touches on that...just a friendly reminder 🙂

[a212830]

Worked. Thanks. So, looking at this, can I lock down access to the databases using this method as well?