Splunk Search

Unknown search command 'dbquery' for non-admin users

michtek
Explorer

Hi, I'm getting "Unknown search command 'dbquery'" error when trying to use | dbquery as non-admin user.
I granted read access to Splunk DB Connect dbquery objects for everyone but still experience the same issue. Are there any other privilleges I should explicitly grant?
Regards, Michal

0 Karma

ziegfried
Influencer

ravidudala
Explorer

Link - not working, can you guide me to the working link or the content of the old link

0 Karma

michtek
Explorer

thanks, worked for me. Have you reported it to dbx authors that [commands] stanza is missing by default in local.meta?

0 Karma

mpechnerle
Engager

Linked article is a 404

Get Updates on the Splunk Community!

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...

SOCin’ it to you at Splunk University

Splunk University is expanding its instructor-led learning portfolio with dedicated Security tracks at .conf25 ...

Credit Card Data Protection & PCI Compliance with Splunk Edge Processor

Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...