<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic db query not working in Splunk Enterprise</title>
    <link>https://community.splunk.com/t5/Splunk-Enterprise/db-query-not-working/m-p/509181#M2613</link>
    <description>&lt;P&gt;Following db query not working.&lt;/P&gt;&lt;P&gt;| dbquery wmsewprd select REC_TYPE, CODE_TYPE, CODE_DESC, SHORT_DESC, USER_ID, To_Char(mod_date_time,'dd/mm/yyyy hh:mi:ss AM') AS MOD_DATE_TIME from SYS_CODE_TYPE where rec_type = 'C' and code_type = 'AWO'&lt;BR /&gt;and (sysdate - mod_date_time)*24*60 &amp;lt; 60"&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Getting following error.&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;command="dbquery", A database error occurred: ORA-00942: table or view does not exist&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;But the table SYS_CODE_TYPE does exist.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;When we run the following query it is returning events.&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;dbquery wmsewprd "select REC_TYPE, CODE_TYPE, CODE_DESC, SHORT_DESC, USER_ID from SYS_CODE_TYPE"&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;What could be the problem&lt;/P&gt;</description>
    <pubDate>Wed, 15 Jul 2020 06:47:55 GMT</pubDate>
    <dc:creator>pratapa</dc:creator>
    <dc:date>2020-07-15T06:47:55Z</dc:date>
    <item>
      <title>db query not working</title>
      <link>https://community.splunk.com/t5/Splunk-Enterprise/db-query-not-working/m-p/509181#M2613</link>
      <description>&lt;P&gt;Following db query not working.&lt;/P&gt;&lt;P&gt;| dbquery wmsewprd select REC_TYPE, CODE_TYPE, CODE_DESC, SHORT_DESC, USER_ID, To_Char(mod_date_time,'dd/mm/yyyy hh:mi:ss AM') AS MOD_DATE_TIME from SYS_CODE_TYPE where rec_type = 'C' and code_type = 'AWO'&lt;BR /&gt;and (sysdate - mod_date_time)*24*60 &amp;lt; 60"&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Getting following error.&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;command="dbquery", A database error occurred: ORA-00942: table or view does not exist&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;But the table SYS_CODE_TYPE does exist.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;When we run the following query it is returning events.&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;dbquery wmsewprd "select REC_TYPE, CODE_TYPE, CODE_DESC, SHORT_DESC, USER_ID from SYS_CODE_TYPE"&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;What could be the problem&lt;/P&gt;</description>
      <pubDate>Wed, 15 Jul 2020 06:47:55 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Enterprise/db-query-not-working/m-p/509181#M2613</guid>
      <dc:creator>pratapa</dc:creator>
      <dc:date>2020-07-15T06:47:55Z</dc:date>
    </item>
    <item>
      <title>Re: db query not working</title>
      <link>https://community.splunk.com/t5/Splunk-Enterprise/db-query-not-working/m-p/509308#M2625</link>
      <description>Have you checked the logs to see if more detail is provided? Look at splunk_app_db_connect_dbx_log.* and splunk_app_db_connect_server.log.&lt;BR /&gt;Also, see what is reported in Oracle's logs.</description>
      <pubDate>Wed, 15 Jul 2020 13:43:47 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Enterprise/db-query-not-working/m-p/509308#M2625</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2020-07-15T13:43:47Z</dc:date>
    </item>
  </channel>
</rss>

