Archive
Highlighted

splunk dbx query error with non-admin - PARSER: Applying intentions failed Unknown search command 'dbinfo'.

New Member

splunk dbx query error with non-admin

Admin user can view the database info and query database.
but non-admin user will export the error like:

Applying intentions failed Unknown search command 'dbinfo'.
Unknown search command 'dbquery'.

It had config the file of
\Splunk\etc\apps\dbx\metadata

============================================================================================

[views/dbquery]
access = read : [ admin, dbadmin, power, user ], write : [ admin, dbadmin ]
owner = nobody
version = 5.0.2
modtime = 1366188201.640625000

[views/dbxstatus]
access = read : [ admin, dbadmin, power, user ], write : [ admin, dbadmin ]
owner = nobody
version = 5.0.2
modtime = 1366188198.562500000

[commands/dbquery]
access = read : [ admin, dbadmin, power, user ], write : [ admin, dbadmin ]
export = system
owner = nobody
version = 5.0.2
modtime = 1366188247.484375000

[views/dbinfo]
access = read : [ admin, dbadmin, power, user ], write : [ admin, dbadmin ]
owner = nobody
version = 5.0.2
modtime = 1366188207.062500000

[commands/dbinfo]
access = read : [ admin, dbadmin, power, user ], write : [ admin, dbadmin ]
export = system
owner = nobody
version = 5.0.2
modtime = 1366188239.125000000

[commands/dbinput]
access = read : [ admin, dbadmin, power, user ], write : [ admin, dbadmin ]
export = system
owner = nobody
version = 5.0.2
modtime = 1366188243.671875000

[commands/dbmonpreview]
access = read : [ admin, dbadmin, power, user ], write : [ admin, dbadmin ]
export = none
owner = nobody
version = 5.0.2
modtime = 1366188220.500000000

[commands/dboutput]
access = read : [ admin, dbadmin, power, user ], write : [ admin, dbadmin ]
owner = nobody
version = 5.0.2
modtime = 1366188245.500000000

[nav/default]
access = read : [ admin, dbadmin, power, user ], write : [ admin, dbadmin ]
owner = nobody
version = 5.0.2
modtime = 1366188217.515625000

[views/home]
access = read : [ admin, dbadmin, power, user ], write : [ admin, dbadmin ]
owner = nobody
version = 5.0.2
modtime = 1366189110.531250000

[savedsearches/DB%20Connect%20Debug%20Log]
access = read : [ admin, dbadmin, power, user ], write : [ admin, dbadmin ]
owner = nobody
version = 5.0.2
modtime = 1366188214.781250000

[savedsearches/Recent%20DB%20Connect%20errors]
access = read : [ admin, dbadmin, power, user ], write : [ admin, dbadmin ]
owner = nobody
version = 5.0.2
modtime = 1366188212.265625000

[savedsearches/Recent%20Java%20Bridge%20errors]
access = read : [ admin, dbadmin, power, user ], write : [ admin, dbadmin ]
owner = nobody
version = 5.0.2
modtime = 1366188210.171875000

[props/dbmon%3Amkv/REPORT-mkv]
access = read : [ admin, dbadmin ], write : [ admin, dbadmin ]
owner = nobody
version = 5.0.2
modtime = 1366188250.343750000

[transforms/dbx-mkv]
access = read : [ admin, dbadmin ], write : [ admin, dbadmin ]
owner = nobody
version = 5.0.2
modtime = 1366188254.078125000

[props/dbxdebug/EXTRACT-fields]
access = read : [ admin, db
admin ], write : [ admin, db_admin ]
owner = nobody
version = 5.0.2
modtime = 1366188252.296875000

[app/install/state]
version = 5.0.2
modtime = 1366187915.203125000

Tags (2)
0 Karma
Highlighted

Re: splunk dbx query error with non-admin - PARSER: Applying intentions failed Unknown search command 'dbinfo'.

Splunk Employee
Splunk Employee

I think you should try the suggestion mentioned here http://splunk-base.splunk.com/answer_link/76048/

View solution in original post

0 Karma