https://community.splunk.com/t5/Splunk-Enterprise-Security/Slpunk-DB-connect-APP/m-p/476333#M7511 <P>i am trying to query the Oracle DB using the statement attached in the case, the query works fine for the batch input, but when i try to put rising column and check point value it throws the error as attached in this case. please update on how to proceed in this case.<span class="lia-inline-image-display-wrapper"><img src="https://community.splunk.com/t5/image/serverpage/image-id/8428i38A2302521611389/image-size/large?v=v2&amp;px=999" title="alt text" alt="alt text" /></span></P> Wed, 19 Feb 2020 10:38:42 GMT malisushil 2020-02-19T10:38:42Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Slpunk-DB-connect-APP/m-p/476333#M7511 <P>i am trying to query the Oracle DB using the statement attached in the case, the query works fine for the batch input, but when i try to put rising column and check point value it throws the error as attached in this case. please update on how to proceed in this case.<span class="lia-inline-image-display-wrapper"><img src="https://community.splunk.com/t5/image/serverpage/image-id/8428i38A2302521611389/image-size/large?v=v2&amp;px=999" title="alt text" alt="alt text" /></span></P> Wed, 19 Feb 2020 10:38:42 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Slpunk-DB-connect-APP/m-p/476333#M7511 malisushil 2020-02-19T10:38:42Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Slpunk-DB-connect-APP/m-p/476334#M7512 <P>I'm not sure which side of this equation it's complaining about. A few things to check:</P> <P>1) Please confirm your source timestamp column is of type TIMESTAMPTZ </P> <P>2) Try using only one timestamp comparison.</P> <P>3) Grab a value from the DB for timestamp (any one of them) and try using that particular construct. </P> <P>A quick search for this shows it looks like your syntax is correct for the to_date, but ... maybe it needs something else.</P> Wed, 19 Feb 2020 19:53:12 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Slpunk-DB-connect-APP/m-p/476334#M7512 Richfez 2020-02-19T19:53:12Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Slpunk-DB-connect-APP/m-p/476335#M7513 <P>sorry to much oracle for me, can you tell me where to check for the source timestamp column</P> Sun, 23 Feb 2020 09:49:21 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Slpunk-DB-connect-APP/m-p/476335#M7513 malisushil 2020-02-23T09:49:21Z