Splunk Search

Unknown search command 'dbxlookup'.

RobertRi
Communicator

Hello Community!

I have created a Dashboard with a dbxlookup command in the search.
As an admin, i don't have problems with the Dashboard but users who wants to view it, get the above error message

I have tried to set the security for the database and the identity but without success.
Do you have a clue why this happens?

Thanks
Rob

0 Karma

woodcock
Esteemed Legend

The dbconnect app adds 2 roles which you need to assign appropriately: dbconnect_admin and dbconnect_user:
https://docs.splunk.com/Documentation/DBX/latest/DeployDBX/Configuresecurityandaccesscontrols

0 Karma
Get Updates on the Splunk Community!

Splunk and TLS: It doesn't have to be too hard

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl.  To make life better, use an ...

Faster Insights with AI, Streamlined Cloud-Native Operations, and More New Lantern ...

Splunk Lantern is a Splunk customer success center that provides practical guidance from Splunk experts on key ...

Splunk Enterprise Security: Your Command Center for PCI DSS Compliance

Every security professional knows the drill. The PCI DSS audit is approaching, and suddenly everyone's asking ...