All Apps and Add-ons

Automate Indexing

harshavrath
Contributor

Hi,

I have installed Splunk & dbx in windows platform is there a way by which i can index my Oracle table records every 12 hours.Can i automate my indexing process.

Any video or doc that i can refer.

Any Help is Appreciated,

Thanks.

Tags (3)
0 Karma
1 Solution

dmaislin_splunk
Splunk Employee
Splunk Employee

dmaislin_splunk
Splunk Employee
Splunk Employee

dmaislin_splunk
Splunk Employee
Splunk Employee
0 Karma

harshavrath
Contributor

can you provide an example or link as how to use the outputlookup command.

0 Karma

dmaislin_splunk
Splunk Employee
Splunk Employee

Now just use the outputlookup search command once the data is indexed to create the lookup table with a scheduled job.

0 Karma

harshavrath
Contributor

the query works
SELECT * FROM table_NM WHERE ROWNUM<=30 AND TRUNC(CREATED_DT) BETWEEN to_date('04-10-2014','mm/dd/yyyy') AND to_date('04-10-2014','mm/dd/yyyy') {{AND $rising_column$ > ?}} ORDER BY CREATED_DT ASC
i was able to index data into splunk.

0 Karma

dmaislin_splunk
Splunk Employee
Splunk Employee

You did not describe the issue. Just import the data into Splunk, leave the order statement off the query and use Splunk command | sort - CREATED_DT_ASC | outputlookup yourlookuptable.csv

0 Karma

dmaislin_splunk
Splunk Employee
Splunk Employee

Does the query work when you test it? Does the data show up in Splunk?

0 Karma

harshavrath
Contributor

if i schedule an cron how will i be able to solve the CREATED_DT issue..?

0 Karma

harshavrath
Contributor

this is the query that i use to index data into splunk

0 Karma

harshavrath
Contributor

SELECT * FROM table_NM WHERE ROWNUM<=30 AND TRUNC(CREATED_DT) BETWEEN to_date('04-10-2014','mm/dd/yyyy') AND to_date('04-10-2014','mm/dd/yyyy') {{AND $rising_column$ > ?}} ORDER BY CREATED_DT ASC

0 Karma

dmaislin_splunk
Splunk Employee
Splunk Employee

You can put it in cron format:

0 0 * * *

Would execute your script at 12 am every day of every week of every month.

A cron statement consists of five parts:

minute
hour
day of month
month
day of week

http://code.tutsplus.com/tutorials/scheduling-tasks-with-cron-jobs--net-8800

0 Karma

harshavrath
Contributor

hi did you refer to "Specify query interval"

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!