Splunk Search

DB Connect: Error in 'script': Getinfo probe failed for external search command 'dbquery'

tyronegreen
Explorer

Hello Everyone, I'm running Splunk Enterprise 6.2 and have the DB Connect app configured to communicate with a local Oracle Database. The connection appears to be established but when I attempt to run a query I get an error:

Error in 'script': Getinfo probe failed for external search command 'dbquery'

The Java Bridge server is running ... I can run similar queries using SQL Developer and they return very quickly and with only a few rows. Any ideas what I'm doing wrong here ? The user I have configured definitely has the correct privileges. Any suggestions would be appreciated, Thank you

Thank you

Tags (4)

amiracle
Splunk Employee
Splunk Employee

I found this on another post which might help with your issue : http://docs.splunk.com/Documentation/DBX/2.0.3/DeployDBX/Commands#For_upgraders

The post is from this answer : http://answers.splunk.com/answers/242788/error-in-script-getinfo-probe-failed-for-external.html

I hope this helps with your issue.

0 Karma

Federica_92
Communicator

Hi, how have you solve this problem?

0 Karma

Lucas_K
Motivator

Getting the same error here. Did you ever resolve this?

0 Karma

Federica_92
Communicator

Any lucky?

0 Karma

tyronegreen
Explorer

DB Info also throws an exception in the log:

2014-12-30 20:51:20.782 dbx6647:DEBUG:PooledConnectionFactory - Validating database connection for database=scdb
2014-12-30 20:51:20.783 dbx6647:DEBUG:Database - Validating database connection...
2014-12-30 20:51:20.783 dbx6647:DEBUG:Database - Executing test query: SELECT 1 FROM DUAL
2014-12-30 20:51:20.784 dbx6647:DEBUG:Database - Database validation successful
2014-12-30 20:51:22.276 dbx6647:ERROR:BridgeSession - Exception occured while executing command: java.net.SocketException: Broken pipe
java.net.SocketException: Broken pipe
at java.net.SocketOutputStream.socketWrite0(Native Method)
at java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:109)
at java.net.SocketOutputStream.write(SocketOutputStream.java:141)
at com.splunk.bridge.session.BridgeSession.sendReturncode(BridgeSession.java:51)
at com.splunk.bridge.session.BridgeSession.call(BridgeSession.java:104)
at com.splunk.bridge.session.BridgeSession.call(BridgeSession.java:30)
at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
at java.util.concurrent.FutureTask.run(FutureTask.java:166)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:724)
2014-12-30 20:51:22.280 dbx6647:ERROR:BridgeSession - Exception occurred while executing command: java.net.SocketException: Broken pipe
java.net.SocketException: Broken pipe
at java.net.SocketOutputStream.socketWrite0(Native Method)
at java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:109)
at java.net.SocketOutputStream.write(SocketOutputStream.java:141)
at com.splunk.bridge.session.BridgeSession.sendReturncode(BridgeSession.java:51)
at com.splunk.bridge.session.BridgeSession.call(BridgeSession.java:116)
at com.splunk.bridge.session.BridgeSession.call(BridgeSession.java:30)
at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
at java.util.concurrent.FutureTask.run(FutureTask.java:166)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:724)
2014-12-30 20:51:22.280 dbx6647:DEBUG:BridgeSession - Shutting down socket IO...
2014-12-30 20:51:22.281 dbx6647:DEBUG:ExecutionContext - Destroying execution context...
2014-12-30 20:51:22.281 dbx6647:DEBUG:Database - Database performShutdown...
2014-12-30 20:51:22.281 dbx6647:DEBUG:PooledConnectionFactory - Release database connection of database=scdb
2014-12-30 20:51:22.282 dbx6647:DEBUG:PooledConnectionFactory - Passivating database connection for database=scdb
2014-12-30 20:51:22.282 dbx6647:INFO:ExecutionContext - Execution finished in duration=1503 ms

0 Karma

tyronegreen
Explorer

Here is the dbx.log information in debug mode ... The query is a simple select * from table.

2014-12-30 20:28:23.158 main:DEBUG:BridgeSession - Initialized BridgeSession for Socket Socket[addr=/127.0.0.1,port=35836,localport=17865]
2014-12-30 20:28:23.159 :DEBUG:BridgeSession - Starting BridgeSession...
2014-12-30 20:28:23.159 :DEBUG:LRUCache - Cache hit for key com.splunk.dbx.command.DatabaseQueryCommand (no need to handleResult producer)
2014-12-30 20:28:23.160 dbx9474:DEBUG:ExecutionContext - Initializing execution context with app.ctx=dbx and execId=dbx9474
2014-12-30 20:28:23.160 dbx9474:INFO:BridgeSession - Executing Bridge command: BridgeExecutionInfo{className=com.splunk.dbx.command.DatabaseQueryCommand}
2014-12-30 20:28:23.161 dbx9474:DEBUG:BridgeSession - Bridge commands arguments: [EXECUTE, scdb, limit=1000, "select * from aps_v_storage_array;"]
2014-12-30 20:28:23.162 dbx9474:INFO:DatabaseQueryCommand - action=executing SQL query="select * from aps_v_storage_array;" on database=scdb
2014-12-30 20:28:23.162 dbx9474:DEBUG:DatabaseQueryCommand - infoPath not in command headers... reading it from job sid=null directly...
2014-12-30 20:28:23.162 dbx9474:WARN:DatabaseQueryCommand - SearchResultsInfo file null doesn't exist
2014-12-30 20:28:23.163 dbx9474:DEBUG:DatabaseQueryCommand - srInfo: null
2014-12-30 20:28:23.163 dbx9474:DEBUG:Database - Fetching connection from factory...
2014-12-30 20:28:23.163 dbx9474:DEBUG:PooledConnectionFactory - Fetching connection from pool...
2014-12-30 20:28:23.163 dbx9474:DEBUG:PooledConnectionFactory - Activating database connection oracle.jdbc.driver.T4CConnection@221c6a1f for database=scdb
2014-12-30 20:28:23.164 dbx9474:DEBUG:PooledConnectionFactory - Validating database connection for database=scdb
2014-12-30 20:28:23.164 dbx9474:DEBUG:Database - Validating database connection...
2014-12-30 20:28:23.165 dbx9474:DEBUG:Database - Executing test query: SELECT 1 FROM DUAL
2014-12-30 20:28:23.167 dbx9474:DEBUG:Database - Database validation successful
2014-12-30 20:28:23.182 dbx9474:ERROR:DatabaseQueryCommand - SQL exception occurred: ORA-00911: invalid character

java.sql.SQLSyntaxErrorException: ORA-00911: invalid character

    at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:447)
    at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:396)
    at oracle.jdbc.driver.T4C8Oall.processError(T4C8Oall.java:951)
    at oracle.jdbc.driver.T4CTTIfun.receive(T4CTTIfun.java:513)
    at oracle.jdbc.driver.T4CTTIfun.doRPC(T4CTTIfun.java:227)
    at oracle.jdbc.driver.T4C8Oall.doOALL(T4C8Oall.java:531)
    at oracle.jdbc.driver.T4CStatement.doOall8(T4CStatement.java:195)
    at oracle.jdbc.driver.T4CStatement.executeForDescribe(T4CStatement.java:876)
    at oracle.jdbc.driver.OracleStatement.executeMaybeDescribe(OracleStatement.java:1175)
    at oracle.jdbc.driver.OracleStatement.doExecuteWithTimeout(OracleStatement.java:1296)
    at oracle.jdbc.driver.OracleStatement.executeInternal(OracleStatement.java:1916)
    at oracle.jdbc.driver.OracleStatement.execute(OracleStatement.java:1878)
    at oracle.jdbc.driver.OracleStatementWrapper.execute(OracleStatementWrapper.java:318)
    at com.splunk.dbx.sql.Database.execute(Database.java:238)
    at com.splunk.dbx.command.DatabaseQueryCommand.executeCommand(DatabaseQueryCommand.java:83)
    at com.splunk.runtime.SplunkCommand.invoke(SplunkCommand.java:237)
    at com.splunk.bridge.session.BridgeSession.call(BridgeSession.java:92)
    at com.splunk.bridge.session.BridgeSession.call(BridgeSession.java:30)
    at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
    at java.util.concurrent.FutureTask.run(FutureTask.java:166)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
    at java.lang.Thread.run(Thread.java:724)

2014-12-30 20:28:23.184 dbx9474:ERROR:DatabaseQueryCommand - Error while executing command: A database error occurred: ORA-00911: invalid character

0 Karma

tyronegreen
Explorer

Does anyone have any suggestions on how I can resolve this ? Thanks

0 Karma

linu1988
Champion

whats the query? or is it the dbinfo view throwing error?

0 Karma

linu1988
Champion

whats the query? or is it the dbinfo view throwing error?

0 Karma
Get Updates on the Splunk Community!

Build Scalable Security While Moving to Cloud - Guide From Clayton Homes

 Clayton Homes faced the increased challenge of strengthening their security posture as they went through ...

Mission Control | Explore the latest release of Splunk Mission Control (2.3)

We’re happy to announce the release of Mission Control 2.3 which includes several new and exciting features ...

Cloud Platform | Migrating your Splunk Cloud deployment to Python 3.7

Python 2.7, the last release of Python 2, reached End of Life back on January 1, 2020. As part of our larger ...