Splunk Search

Which command can I use to get data from a database? (not "dbxquery")

agentsofshield
Path Finder

I usually use "dbxquery" but it only works in the search app. I'm trying to export data from a database through Splunk SDK, so I'd like to know if there's an alternative command for the same purpose.

0 Karma
1 Solution

agentsofshield
Path Finder

I solved it, my mistake was that the query originally included a lot of quotations, so I added a config file where I wrote all the queries, then imported it to the script with this:

https://docs.python.org/2/library/xml.etree.elementtree.html

So, it's mostly a Python issue not a Splunk issue.

View solution in original post

agentsofshield
Path Finder

I solved it, my mistake was that the query originally included a lot of quotations, so I added a config file where I wrote all the queries, then imported it to the script with this:

https://docs.python.org/2/library/xml.etree.elementtree.html

So, it's mostly a Python issue not a Splunk issue.

horsefez
Motivator

Hi @agentsofshield,

have you found the DB-Connect app yet?

https://splunkbase.splunk.com/app/2686/

Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...