Getting Data In

Splunk DB connect - Cannot get schemas

xlin
Engager

Hello splunk community,

There might be some configuration issues in our environment, but I could not find anything standing out even after I turned on all logging to "DEBUG" mode. Following are the symptoms of the issue:

1. On the "New Input" left manual:

I am able to pick a connection; a Catalog ("TE"), but then "Schema" section turns red and shows "Cannot get schemas". < the user has full admin right on the server>

2. On the "SQLEditor":

If I type in SELECT * from TE.dbo.Node, and execute the query, the correct results will be returned.

So it seems that on the same splunk page, the results are contradicting each other, can anyone help to point me to the right direction on how to resolve this.

The DB connect version is 3.2.0; and I am using connection type MS-SQL Server Generic Driver (Ver. 3.0), SQL server itself is SQL2016.

Also, please also note that the same connection and user setup is able to get the other schemas on the same SQL instance without any issues; only failed in one particular database, and even after I tried to restore the troublesome db to a different name.

Thank you very much in advance.

Labels (1)
0 Karma

nsanzar_splunk
Splunk Employee
Splunk Employee

As per harsmarvania57:

In DB, there are schemas available and each schema have different table. So in DB you need to provide schema access & table access to user from which splunk is trying to fetch data.

Original post:  https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-DB-Connect-Why-am-I-getting-error-quot-n... 

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...

SplunkTrust Application Period is Officially OPEN!

It's that time, folks! The application/nomination period for the 2026-2027 SplunkTrust is officially open. If ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...