<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: What is the correct syntax to change Database Monitor (dbmon-tail) in setup.xml? in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/What-is-the-correct-syntax-to-change-Database-Monitor-dbmon-tail/m-p/180565#M36225</link>
    <description>&lt;P&gt;dbmon-tail stanzas are normally added to an inputs.conf in $SPLUNK_HOME/etc/apps/dbx/local when you create a tail input in the db connect web interface.&lt;/P&gt;

&lt;P&gt;This section of the DBX documentation covers the basic concepts:&lt;/P&gt;

&lt;P&gt;&lt;A href="http://docs.splunk.com/Documentation/DBX/1.1.6/DeployDBX/Configuredatabasemonitoring#How_dbmon-tail_inputs_work"&gt;http://docs.splunk.com/Documentation/DBX/1.1.6/DeployDBX/Configuredatabasemonitoring#How_dbmon-tail_inputs_work&lt;/A&gt;. I am not sure I understand what you are trying to do with setup.xml in this context. Does this information help? If not could you elaborate a little more on what you are trying to change?&lt;/P&gt;</description>
    <pubDate>Sat, 10 Jan 2015 16:47:33 GMT</pubDate>
    <dc:creator>chanfoli</dc:creator>
    <dc:date>2015-01-10T16:47:33Z</dc:date>
    <item>
      <title>What is the correct syntax to change Database Monitor (dbmon-tail) in setup.xml?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/What-is-the-correct-syntax-to-change-Database-Monitor-dbmon-tail/m-p/180564#M36224</link>
      <description>&lt;P&gt;What is the correct syntax to change Database Monitor (dbmon-tail) in setup.xml?&lt;/P&gt;

&lt;P&gt;Example:&lt;/P&gt;

&lt;P&gt;[dbmon-tail://MY_DB/mydbqueryname]&lt;/P&gt;

&lt;P&gt;setup.xml&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;  &amp;lt;block title="My Database Monitor" endpoint="admin/dbx-monitors" entity="MY_DB%252FMYDBQUERYNAME"&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Fri, 09 Jan 2015 23:10:02 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/What-is-the-correct-syntax-to-change-Database-Monitor-dbmon-tail/m-p/180564#M36224</guid>
      <dc:creator>pedromvieira</dc:creator>
      <dc:date>2015-01-09T23:10:02Z</dc:date>
    </item>
    <item>
      <title>Re: What is the correct syntax to change Database Monitor (dbmon-tail) in setup.xml?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/What-is-the-correct-syntax-to-change-Database-Monitor-dbmon-tail/m-p/180565#M36225</link>
      <description>&lt;P&gt;dbmon-tail stanzas are normally added to an inputs.conf in $SPLUNK_HOME/etc/apps/dbx/local when you create a tail input in the db connect web interface.&lt;/P&gt;

&lt;P&gt;This section of the DBX documentation covers the basic concepts:&lt;/P&gt;

&lt;P&gt;&lt;A href="http://docs.splunk.com/Documentation/DBX/1.1.6/DeployDBX/Configuredatabasemonitoring#How_dbmon-tail_inputs_work"&gt;http://docs.splunk.com/Documentation/DBX/1.1.6/DeployDBX/Configuredatabasemonitoring#How_dbmon-tail_inputs_work&lt;/A&gt;. I am not sure I understand what you are trying to do with setup.xml in this context. Does this information help? If not could you elaborate a little more on what you are trying to change?&lt;/P&gt;</description>
      <pubDate>Sat, 10 Jan 2015 16:47:33 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/What-is-the-correct-syntax-to-change-Database-Monitor-dbmon-tail/m-p/180565#M36225</guid>
      <dc:creator>chanfoli</dc:creator>
      <dc:date>2015-01-10T16:47:33Z</dc:date>
    </item>
    <item>
      <title>Re: What is the correct syntax to change Database Monitor (dbmon-tail) in setup.xml?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/What-is-the-correct-syntax-to-change-Database-Monitor-dbmon-tail/m-p/180566#M36226</link>
      <description>&lt;P&gt;I moved my dbmon-tail to my app folder. It's working. &lt;BR /&gt;
I need to change the query part for each installation, because each can point to a new table and/or customer, that's why I want to do it in setup.xml.&lt;/P&gt;

&lt;P&gt;setup.xml&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;  &amp;lt;block title="My - Database Monitor" endpoint="admin/dbx-monitors" entity="..."&amp;gt;
    &amp;lt;input field="query"&amp;gt;
      &amp;lt;label&amp;gt;Query&amp;lt;/label&amp;gt;
      &amp;lt;type&amp;gt;text&amp;lt;/type&amp;gt;
    &amp;lt;/input&amp;gt;
    &amp;lt;input field="interval"&amp;gt;
      &amp;lt;label&amp;gt;Schedule&amp;lt;/label&amp;gt;
      &amp;lt;type&amp;gt;text&amp;lt;/type&amp;gt;
    &amp;lt;/input&amp;gt;    
    &amp;lt;input field="disabled"&amp;gt;
      &amp;lt;label&amp;gt;Disabled&amp;lt;/label&amp;gt;
      &amp;lt;type&amp;gt;bool&amp;lt;/type&amp;gt;
    &amp;lt;/input&amp;gt;  
  &amp;lt;/block&amp;gt; 
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;input.conf&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;[dbmon-tail://MYQUERY]
interval = 5
query = SELECT * FROM [MY_TABLE] {{WHERE $rising_column$ &amp;gt; ?}}
disabled = 0
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Sat, 10 Jan 2015 17:36:10 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/What-is-the-correct-syntax-to-change-Database-Monitor-dbmon-tail/m-p/180566#M36226</guid>
      <dc:creator>pedromvieira</dc:creator>
      <dc:date>2015-01-10T17:36:10Z</dc:date>
    </item>
    <item>
      <title>Re: What is the correct syntax to change Database Monitor (dbmon-tail) in setup.xml?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/What-is-the-correct-syntax-to-change-Database-Monitor-dbmon-tail/m-p/180567#M36227</link>
      <description>&lt;P&gt;Although I do not see it documented specifically for setup.xml, if default values for query is what you are after, enclosing the text in a &lt;STRONG&gt;default&lt;/STRONG&gt; element inside the query input &lt;EM&gt;might&lt;/EM&gt; work.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;input field="query"&amp;gt;
       &amp;lt;label&amp;gt;Query&amp;lt;/label&amp;gt;
       &amp;lt;type&amp;gt;text&amp;lt;/type&amp;gt;
       &amp;lt;default&amp;gt;SELECT something FROM something-else&amp;lt;/default&amp;gt;
     &amp;lt;/input&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Sat, 10 Jan 2015 17:59:15 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/What-is-the-correct-syntax-to-change-Database-Monitor-dbmon-tail/m-p/180567#M36227</guid>
      <dc:creator>chanfoli</dc:creator>
      <dc:date>2015-01-10T17:59:15Z</dc:date>
    </item>
    <item>
      <title>Re: What is the correct syntax to change Database Monitor (dbmon-tail) in setup.xml?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/What-is-the-correct-syntax-to-change-Database-Monitor-dbmon-tail/m-p/180568#M36228</link>
      <description>&lt;P&gt;I fixed it with correct URL Encoding.&lt;/P&gt;

&lt;P&gt;URL Enconding reference:&lt;BR /&gt;
    &lt;A href="http://www.w3schools.com/tags/ref_urlencode.asp"&gt;http://www.w3schools.com/tags/ref_urlencode.asp&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;inputs.conf&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;[dbmon-tail://MYQUERY]
interval = 5
query = SELECT * FROM [MY_TABLE] {{WHERE $rising_column$ &amp;gt; ?}}
disabled = 0
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;setup.xml&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;  &amp;lt;block title="MY_DBMON" endpoint="admin/dbx-monitors" entity="dbmon%2Dtail%3A%252F%252FMY_DBQUERY"&amp;gt;
    &amp;lt;input field="query"&amp;gt;
      &amp;lt;label&amp;gt;Query&amp;lt;/label&amp;gt;
      &amp;lt;type&amp;gt;text&amp;lt;/type&amp;gt;
    &amp;lt;/input&amp;gt;
    &amp;lt;input field="interval"&amp;gt;
      &amp;lt;label&amp;gt;Schedule&amp;lt;/label&amp;gt;
      &amp;lt;type&amp;gt;text&amp;lt;/type&amp;gt;
    &amp;lt;/input&amp;gt;    
    &amp;lt;input field="disabled"&amp;gt;
      &amp;lt;label&amp;gt;Disabled&amp;lt;/label&amp;gt;
      &amp;lt;type&amp;gt;bool&amp;lt;/type&amp;gt;
    &amp;lt;/input&amp;gt;  
  &amp;lt;/block&amp;gt;  
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;This translates:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;dbmon%2Dtail%3A%252F%252FMYDBQUERY

TO

dbmon-tail://MYQUERY
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Tue, 13 Jan 2015 12:54:53 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/What-is-the-correct-syntax-to-change-Database-Monitor-dbmon-tail/m-p/180568#M36228</guid>
      <dc:creator>pedromvieira</dc:creator>
      <dc:date>2015-01-13T12:54:53Z</dc:date>
    </item>
  </channel>
</rss>

