Splunk Search

Can't connect to SQLite database

responsys_cm
Builder

I'm using the DB Connect V1 app in Splunk 6.2 on an Ubuntu Linux server. I have a local sqlite database. I can use the sqlite3 command to connect to it successfully.

I've created a database connection that looks like:

[vFeed]

database = /opt/vFeed/vfeed.db
host = localhost

isolation_level = DATABASE_SETTING

type = sqlite

disabled = 0
username = root

When I try and browse the schema, I get the following error:

The internal search "| dbinfo database="vFeed" type=schemas | sort -default | eval label=if(isnull(default),schema,schema+" (default)")" for the "Splunk.Module.SearchSelectLister" module failed.

I'm not seeing any error messages.

What am I doing wrong here?

Thx.

Craig

Tags (1)
0 Karma

responsys_cm
Builder

The database file is vfeed.db. Renaming it vfeed.sqlite and placing it in the /opt/splunk/var/dbx folder solved the problem.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

🍂 Fall into November with a fresh lineup of Community Office Hours, Tech Talks, and Webinars we’ve ...

Transform your security operations with Splunk Enterprise Security

Hi Splunk Community, Splunk Platform has set a great foundation for your security operations. With the ...

Splunk Admins and App Developers | Earn a $35 gift card!

Splunk, in collaboration with ESG (Enterprise Strategy Group) by TechTarget, is excited to announce a ...