Splunk Search

DB Connect: Error in 'script': Getinfo probe failed for external search command 'dbquery'

tyronegreen
Explorer

Hello Everyone, I'm running Splunk Enterprise 6.2 and have the DB Connect app configured to communicate with a local Oracle Database. The connection appears to be established but when I attempt to run a query I get an error:

Error in 'script': Getinfo probe failed for external search command 'dbquery'

The Java Bridge server is running ... I can run similar queries using SQL Developer and they return very quickly and with only a few rows. Any ideas what I'm doing wrong here ? The user I have configured definitely has the correct privileges. Any suggestions would be appreciated, Thank you

Thank you

Tags (4)

amiracle
Splunk Employee
Splunk Employee

I found this on another post which might help with your issue : http://docs.splunk.com/Documentation/DBX/2.0.3/DeployDBX/Commands#For_upgraders

The post is from this answer : http://answers.splunk.com/answers/242788/error-in-script-getinfo-probe-failed-for-external.html

I hope this helps with your issue.

0 Karma

Federica_92
Communicator

Hi, how have you solve this problem?

0 Karma

Lucas_K
Motivator

Getting the same error here. Did you ever resolve this?

0 Karma

Federica_92
Communicator

Any lucky?

0 Karma

tyronegreen
Explorer

DB Info also throws an exception in the log:

2014-12-30 20:51:20.782 dbx6647:DEBUG:PooledConnectionFactory - Validating database connection for database=scdb
2014-12-30 20:51:20.783 dbx6647:DEBUG:Database - Validating database connection...
2014-12-30 20:51:20.783 dbx6647:DEBUG:Database - Executing test query: SELECT 1 FROM DUAL
2014-12-30 20:51:20.784 dbx6647:DEBUG:Database - Database validation successful
2014-12-30 20:51:22.276 dbx6647:ERROR:BridgeSession - Exception occured while executing command: java.net.SocketException: Broken pipe
java.net.SocketException: Broken pipe
at java.net.SocketOutputStream.socketWrite0(Native Method)
at java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:109)
at java.net.SocketOutputStream.write(SocketOutputStream.java:141)
at com.splunk.bridge.session.BridgeSession.sendReturncode(BridgeSession.java:51)
at com.splunk.bridge.session.BridgeSession.call(BridgeSession.java:104)
at com.splunk.bridge.session.BridgeSession.call(BridgeSession.java:30)
at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
at java.util.concurrent.FutureTask.run(FutureTask.java:166)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:724)
2014-12-30 20:51:22.280 dbx6647:ERROR:BridgeSession - Exception occurred while executing command: java.net.SocketException: Broken pipe
java.net.SocketException: Broken pipe
at java.net.SocketOutputStream.socketWrite0(Native Method)
at java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:109)
at java.net.SocketOutputStream.write(SocketOutputStream.java:141)
at com.splunk.bridge.session.BridgeSession.sendReturncode(BridgeSession.java:51)
at com.splunk.bridge.session.BridgeSession.call(BridgeSession.java:116)
at com.splunk.bridge.session.BridgeSession.call(BridgeSession.java:30)
at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
at java.util.concurrent.FutureTask.run(FutureTask.java:166)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:724)
2014-12-30 20:51:22.280 dbx6647:DEBUG:BridgeSession - Shutting down socket IO...
2014-12-30 20:51:22.281 dbx6647:DEBUG:ExecutionContext - Destroying execution context...
2014-12-30 20:51:22.281 dbx6647:DEBUG:Database - Database performShutdown...
2014-12-30 20:51:22.281 dbx6647:DEBUG:PooledConnectionFactory - Release database connection of database=scdb
2014-12-30 20:51:22.282 dbx6647:DEBUG:PooledConnectionFactory - Passivating database connection for database=scdb
2014-12-30 20:51:22.282 dbx6647:INFO:ExecutionContext - Execution finished in duration=1503 ms

0 Karma

tyronegreen
Explorer

Here is the dbx.log information in debug mode ... The query is a simple select * from table.

2014-12-30 20:28:23.158 main:DEBUG:BridgeSession - Initialized BridgeSession for Socket Socket[addr=/127.0.0.1,port=35836,localport=17865]
2014-12-30 20:28:23.159 :DEBUG:BridgeSession - Starting BridgeSession...
2014-12-30 20:28:23.159 :DEBUG:LRUCache - Cache hit for key com.splunk.dbx.command.DatabaseQueryCommand (no need to handleResult producer)
2014-12-30 20:28:23.160 dbx9474:DEBUG:ExecutionContext - Initializing execution context with app.ctx=dbx and execId=dbx9474
2014-12-30 20:28:23.160 dbx9474:INFO:BridgeSession - Executing Bridge command: BridgeExecutionInfo{className=com.splunk.dbx.command.DatabaseQueryCommand}
2014-12-30 20:28:23.161 dbx9474:DEBUG:BridgeSession - Bridge commands arguments: [EXECUTE, scdb, limit=1000, "select * from aps_v_storage_array;"]
2014-12-30 20:28:23.162 dbx9474:INFO:DatabaseQueryCommand - action=executing SQL query="select * from aps_v_storage_array;" on database=scdb
2014-12-30 20:28:23.162 dbx9474:DEBUG:DatabaseQueryCommand - infoPath not in command headers... reading it from job sid=null directly...
2014-12-30 20:28:23.162 dbx9474:WARN:DatabaseQueryCommand - SearchResultsInfo file null doesn't exist
2014-12-30 20:28:23.163 dbx9474:DEBUG:DatabaseQueryCommand - srInfo: null
2014-12-30 20:28:23.163 dbx9474:DEBUG:Database - Fetching connection from factory...
2014-12-30 20:28:23.163 dbx9474:DEBUG:PooledConnectionFactory - Fetching connection from pool...
2014-12-30 20:28:23.163 dbx9474:DEBUG:PooledConnectionFactory - Activating database connection oracle.jdbc.driver.T4CConnection@221c6a1f for database=scdb
2014-12-30 20:28:23.164 dbx9474:DEBUG:PooledConnectionFactory - Validating database connection for database=scdb
2014-12-30 20:28:23.164 dbx9474:DEBUG:Database - Validating database connection...
2014-12-30 20:28:23.165 dbx9474:DEBUG:Database - Executing test query: SELECT 1 FROM DUAL
2014-12-30 20:28:23.167 dbx9474:DEBUG:Database - Database validation successful
2014-12-30 20:28:23.182 dbx9474:ERROR:DatabaseQueryCommand - SQL exception occurred: ORA-00911: invalid character

java.sql.SQLSyntaxErrorException: ORA-00911: invalid character

    at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:447)
    at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:396)
    at oracle.jdbc.driver.T4C8Oall.processError(T4C8Oall.java:951)
    at oracle.jdbc.driver.T4CTTIfun.receive(T4CTTIfun.java:513)
    at oracle.jdbc.driver.T4CTTIfun.doRPC(T4CTTIfun.java:227)
    at oracle.jdbc.driver.T4C8Oall.doOALL(T4C8Oall.java:531)
    at oracle.jdbc.driver.T4CStatement.doOall8(T4CStatement.java:195)
    at oracle.jdbc.driver.T4CStatement.executeForDescribe(T4CStatement.java:876)
    at oracle.jdbc.driver.OracleStatement.executeMaybeDescribe(OracleStatement.java:1175)
    at oracle.jdbc.driver.OracleStatement.doExecuteWithTimeout(OracleStatement.java:1296)
    at oracle.jdbc.driver.OracleStatement.executeInternal(OracleStatement.java:1916)
    at oracle.jdbc.driver.OracleStatement.execute(OracleStatement.java:1878)
    at oracle.jdbc.driver.OracleStatementWrapper.execute(OracleStatementWrapper.java:318)
    at com.splunk.dbx.sql.Database.execute(Database.java:238)
    at com.splunk.dbx.command.DatabaseQueryCommand.executeCommand(DatabaseQueryCommand.java:83)
    at com.splunk.runtime.SplunkCommand.invoke(SplunkCommand.java:237)
    at com.splunk.bridge.session.BridgeSession.call(BridgeSession.java:92)
    at com.splunk.bridge.session.BridgeSession.call(BridgeSession.java:30)
    at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
    at java.util.concurrent.FutureTask.run(FutureTask.java:166)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
    at java.lang.Thread.run(Thread.java:724)

2014-12-30 20:28:23.184 dbx9474:ERROR:DatabaseQueryCommand - Error while executing command: A database error occurred: ORA-00911: invalid character

0 Karma

tyronegreen
Explorer

Does anyone have any suggestions on how I can resolve this ? Thanks

0 Karma

linu1988
Champion

whats the query? or is it the dbinfo view throwing error?

0 Karma

linu1988
Champion

whats the query? or is it the dbinfo view throwing error?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Event Series: Splunk Observability Metrics Cost Optimization

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...

Deep insights, no barriers: Splunk Observability Cloud Free Edition

As software delivery cycles continue to accelerate, observability shouldn’t be a luxury — it should be a ...