topic Re: splunk dbconnect tail issue in Getting Data In

splunk dbconnect tail issue

rameshlpatel — Mon, 28 Sep 2020 16:39:02 GMT

hi,
at time of adding database input i select tail as input type and add following query.

SELECT
pkey,fk_vehicle,created,processed,status,lasterror,obuid,started
FROM ocs_admin.tp_obuimportdata
{{WHERE $rising_column$ > ?}}

and add raising column field as 'created' column name.

My requirement is i want to fetch data from current timestamp but above configuration is fetching all table data.

Please suggest help.

Re: splunk dbconnect tail issue

linu1988 — Sat, 17 May 2014 12:47:22 GMT

which is your time field? and your rising column should be incrementing. Do a where clause where it should ignore all the previous data then fetch it.

Re: splunk dbconnect tail issue

abhijitmishra — Wed, 04 Jun 2014 23:26:05 GMT

To the inputs.conf stanza add the following

tail.follow.only = true