Splunk Search

Where to enable the "dbx_capable" capability in Splunk DB Connect?

OCIEL
Engager

I have a Prod and Non-Prod instances of Splunk running. A former admin installed DBX in both. In trying to setup the same users/access controls from Non-Prod to Prod, I am seeing a 'dbx_user' role with the 'dbx_capable' capability in my Non-Prod instance, but nothing like that in my Prod instance. Only admins have access to DB Connect in Prod.

Of course I can add any user/roles i want, but I believe I need to enable this capability or it wont get me anywhere. I'm trying to find where to do this, but not having much luck in reviewing the UI or the CLI, or finding the answer on Splunk.com.

I hope someone has had this issue if not suggestions are welcome.

Thanks

0 Karma
1 Solution

OCIEL
Engager

I found it was a problem with the DB Connect version (older) in our PROD environment. Capability there after upgrade. Sorry for the late follow-up on this.

View solution in original post

0 Karma

OCIEL
Engager

I found it was a problem with the DB Connect version (older) in our PROD environment. Capability there after upgrade. Sorry for the late follow-up on this.

0 Karma

jcoates_splunk
Splunk Employee
Splunk Employee

hi, this is done through splunk's settings, under Access Controls, Roles

0 Karma
Get Updates on the Splunk Community!

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...

Edge Processor Scaling, Energy & Manufacturing Use Cases, and More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...