https://community.splunk.com/t5/Splunk-Search/Splunk-fetching-results-from-database-in-realtime/m-p/424110#M168426 <P>Thank you for you response<BR /> If I give cron schedule as ***** (five stars) . At what intrval does this execute the query?</P> Mon, 09 Jul 2018 18:26:06 GMT ankithreddy777 2018-07-09T18:26:06Z https://community.splunk.com/t5/Splunk-Search/Splunk-fetching-results-from-database-in-realtime/m-p/424108#M168424 <P>Can we set frequency to fetch results from database to real time. Does that effect anything.</P> <P>Does Splunk take more space to index database inputs rather than regular raw data inputs. I assume so, because the field-values from database inputs seems to be indexed too.</P> Mon, 09 Jul 2018 16:03:04 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-fetching-results-from-database-in-realtime/m-p/424108#M168424 ankithreddy777 2018-07-09T16:03:04Z https://community.splunk.com/t5/Splunk-Search/Splunk-fetching-results-from-database-in-realtime/m-p/424109#M168425 <P>There is no real-time fetching of database rows. Splunk reads from a database by executing a SQL query at regular intervals. It has no way of knowing when new data has been added to the database before executing the query.</P> <P>The space needed to index data depends on how that data is presented to Splunk. Database data may take more space, but it depends on what you use for a comparison.</P> Mon, 09 Jul 2018 17:44:56 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-fetching-results-from-database-in-realtime/m-p/424109#M168425 richgalloway 2018-07-09T17:44:56Z https://community.splunk.com/t5/Splunk-Search/Splunk-fetching-results-from-database-in-realtime/m-p/424110#M168426 <P>Thank you for you response<BR /> If I give cron schedule as ***** (five stars) . At what intrval does this execute the query?</P> Mon, 09 Jul 2018 18:26:06 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-fetching-results-from-database-in-realtime/m-p/424110#M168426 ankithreddy777 2018-07-09T18:26:06Z https://community.splunk.com/t5/Splunk-Search/Splunk-fetching-results-from-database-in-realtime/m-p/424111#M168427 <P>Once a minute.</P> Tue, 10 Jul 2018 12:21:48 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-fetching-results-from-database-in-realtime/m-p/424111#M168427 richgalloway 2018-07-10T12:21:48Z