Splunk searches relating to Database Connect (DBX)
clear
| rest splunk_server=local /servicesNS/-/splunk_app_db_connect/configs/conf-db_connections | search [ | rest splunk_server=local /servicesNS/-/splunk_app_db_connect/configs/conf-db_inputs | search disabled=0 | stats count by connection | fields - count | rename connection as title | format ] | table title connection_type database host identity port
| rest splunk_server=local /servicesNS/-/splunk_app_db_connect/configs/conf-db_inputs
| rest splunk_server=local /servicesNS/-/splunk_app_db_connect/configs/conf-identities
| rename title as user_title
| map [ | rest splunk_server=local /servicesNS/-/splunk_app_db_connect/configs/conf-db_connections | search disabled=0 AND identity="$user_title$" | eval username="$username$", domain_name="$domain_name$" ]
| table title connection_type database host identity username domain_name
| rest splunk_server=local /servicesNS/-/splunk_app_db_connect/configs/conf-identities
| rest splunk_server=local /servicesNS/-/splunk_app_db_connect/configs/conf-db_connections