https://community.splunk.com/t5/Getting-Data-In/DB-Connect-Rising-old-logs/m-p/541834#M90593 <P>&nbsp;</P><P>Database connection via DB connect in rising mode</P><P>It was presented that logs stopped arriving for a range of 2 hours</P><P>If the configuration is in rising, it is understood that only new records are brought, and if there is no data in a time range, is it because the database does not have that information?</P><P>Because that is what I am going to answer to the client, that he check directly in the database if the data in that time range exists or does not exist</P><P>or should I check something else?</P> Mon, 01 Mar 2021 18:01:00 GMT splunkcol 2021-03-01T18:01:00Z https://community.splunk.com/t5/Getting-Data-In/DB-Connect-Rising-old-logs/m-p/541834#M90593 <P>&nbsp;</P><P>Database connection via DB connect in rising mode</P><P>It was presented that logs stopped arriving for a range of 2 hours</P><P>If the configuration is in rising, it is understood that only new records are brought, and if there is no data in a time range, is it because the database does not have that information?</P><P>Because that is what I am going to answer to the client, that he check directly in the database if the data in that time range exists or does not exist</P><P>or should I check something else?</P> Mon, 01 Mar 2021 18:01:00 GMT https://community.splunk.com/t5/Getting-Data-In/DB-Connect-Rising-old-logs/m-p/541834#M90593 splunkcol 2021-03-01T18:01:00Z https://community.splunk.com/t5/Getting-Data-In/DB-Connect-Rising-old-logs/m-p/541839#M90594 <P>Yes, the use of a rising column means only new data will be read from the DB.&nbsp; That presumes, of course, that the instance running DB Connect was running for those 2 hours and the DBX input was enabled.</P> Mon, 01 Mar 2021 18:35:30 GMT https://community.splunk.com/t5/Getting-Data-In/DB-Connect-Rising-old-logs/m-p/541839#M90594 richgalloway 2021-03-01T18:35:30Z