topic Re: Why is the Splunk DB Connect app suddenly not pulling logs into our index? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Why-is-the-Splunk-DB-Connect-app-suddenly-not-pulling-logs-into/m-p/239498#M46549 <P>Your logs have a few different errors, but this one seems most relevant:</P> <PRE><CODE>dbx2125:ERROR:TailDatabaseMonitor - Error while executing database monitor: com.splunk.dbx.DbxException: Error getting database connection: ORA-28001: the password has expired </CODE></PRE> <P>An expired password would certainly explain a sudden failure to extract data. Update your DB Connect settings for the database to have the new password and try again.</P> Wed, 20 Jan 2016 18:29:24 GMT richgalloway 2016-01-20T18:29:24Z Why is the Splunk DB Connect app suddenly not pulling logs into our index? https://community.splunk.com/t5/Getting-Data-In/Why-is-the-Splunk-DB-Connect-app-suddenly-not-pulling-logs-into/m-p/239496#M46547 <P>Hi Splunkers,</P> <P>Suddenly I am not getting logs in to index fetching from database via Splunk DB Connect App.</P> <P>The error logs which I received from dbx_debug sourcetype as below.</P> <PRE><CODE>dbx3895:ERROR:ResultSetOutputPayload - The timestamp column "timesstamp" doesn't exist! dbx2125:ERROR:TailDatabaseMonitor - Error while executing database monitor: com.splunk.dbx.DbxException: Error getting database connection: ORA-28001: the password has expired dbx7905:ERROR:TailDatabaseMonitor - Error while executing database monitor: com.ibm.db2.jcc.am.SqlSyntaxErrorException: DB2 SQL Error: SQLCODE=-206, SQLSTATE=42703, SQLERRMC=UPDATED_TIME, DRIVER=4.14.111 com.ibm.db2.jcc.am.SqlSyntaxErrorException: DB2 SQL Error: SQLCODE=-206, SQLSTATE=42703, SQLERRMC=UPDATED_TIME, DRIVER=4.14.111 Error while executing database monitor: java.sql.SQLSyntaxErrorException: ORA-00907: missing right parenthesis java.sql.SQLSyntaxErrorException: ORA-00907: missing right parenthesis </CODE></PRE> <P>Please guide me to solve this issue.<BR /> Thanks</P> Wed, 20 Jan 2016 15:41:36 GMT https://community.splunk.com/t5/Getting-Data-In/Why-is-the-Splunk-DB-Connect-app-suddenly-not-pulling-logs-into/m-p/239496#M46547 madan27 2016-01-20T15:41:36Z Re: Why is the Splunk DB Connect app suddenly not pulling logs into our index? https://community.splunk.com/t5/Getting-Data-In/Why-is-the-Splunk-DB-Connect-app-suddenly-not-pulling-logs-into/m-p/239497#M46548 <P>Hi @madan27</P> <P>Which version of Splunk DB Connect are you using? 1 or 2?</P> Wed, 20 Jan 2016 17:47:17 GMT https://community.splunk.com/t5/Getting-Data-In/Why-is-the-Splunk-DB-Connect-app-suddenly-not-pulling-logs-into/m-p/239497#M46548 ppablo 2016-01-20T17:47:17Z Re: Why is the Splunk DB Connect app suddenly not pulling logs into our index? https://community.splunk.com/t5/Getting-Data-In/Why-is-the-Splunk-DB-Connect-app-suddenly-not-pulling-logs-into/m-p/239498#M46549 <P>Your logs have a few different errors, but this one seems most relevant:</P> <PRE><CODE>dbx2125:ERROR:TailDatabaseMonitor - Error while executing database monitor: com.splunk.dbx.DbxException: Error getting database connection: ORA-28001: the password has expired </CODE></PRE> <P>An expired password would certainly explain a sudden failure to extract data. Update your DB Connect settings for the database to have the new password and try again.</P> Wed, 20 Jan 2016 18:29:24 GMT https://community.splunk.com/t5/Getting-Data-In/Why-is-the-Splunk-DB-Connect-app-suddenly-not-pulling-logs-into/m-p/239498#M46549 richgalloway 2016-01-20T18:29:24Z Re: Why is the Splunk DB Connect app suddenly not pulling logs into our index? https://community.splunk.com/t5/Getting-Data-In/Why-is-the-Splunk-DB-Connect-app-suddenly-not-pulling-logs-into/m-p/239499#M46550 <P>It is working fine now as admin enabled some options.</P> Thu, 21 Jan 2016 12:54:48 GMT https://community.splunk.com/t5/Getting-Data-In/Why-is-the-Splunk-DB-Connect-app-suddenly-not-pulling-logs-into/m-p/239499#M46550 madan27 2016-01-21T12:54:48Z