Splunk Search

Unknown search command 'dbquery' for non-admin users

michtek
Explorer

Hi, I'm getting "Unknown search command 'dbquery'" error when trying to use | dbquery as non-admin user.
I granted read access to Splunk DB Connect dbquery objects for everyone but still experience the same issue. Are there any other privilleges I should explicitly grant?
Regards, Michal

0 Karma

ziegfried
Influencer

ravidudala
Explorer

Link - not working, can you guide me to the working link or the content of the old link

0 Karma

michtek
Explorer

thanks, worked for me. Have you reported it to dbx authors that [commands] stanza is missing by default in local.meta?

0 Karma

mpechnerle
Engager

Linked article is a 404

Get Updates on the Splunk Community!

Pro Tips for First-Time .conf Attendees: Advice from SplunkTrust

Heading to your first .Conf? You’re in for an unforgettable ride — learning, networking, swag collecting, ...

Raise Your Skills at the .conf25 Builder Bar: Your Splunk Developer Destination

Calling all Splunk developers, custom SPL builders, dashboarders, and Splunkbase app creators – the Builder ...

Hunt Smarter, Not Harder: Discover New SPL “Recipes” in Our Threat Hunting Webinar

Are you ready to take your threat hunting skills to the next level? As Splunk community members, you know the ...