Splunk Search

Unknown search command 'dbquery' for non-admin users

michtek
Explorer

Hi, I'm getting "Unknown search command 'dbquery'" error when trying to use | dbquery as non-admin user.
I granted read access to Splunk DB Connect dbquery objects for everyone but still experience the same issue. Are there any other privilleges I should explicitly grant?
Regards, Michal

0 Karma

ziegfried
Influencer

ravidudala
Explorer

Link - not working, can you guide me to the working link or the content of the old link

0 Karma

michtek
Explorer

thanks, worked for me. Have you reported it to dbx authors that [commands] stanza is missing by default in local.meta?

0 Karma

mpechnerle
Engager

Linked article is a 404

Get Updates on the Splunk Community!

See Splunk Platform & Observability Innovations at Cisco Live EMEA

Hi Splunkers, Learn about what’s next for Splunk Platform at Cisco Live EMEA.  Data silos are a big challenge ...

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...