All Apps and Add-ons

Automate Indexing

harshavrath
Contributor

Hi,

I have installed Splunk & dbx in windows platform is there a way by which i can index my Oracle table records every 12 hours.Can i automate my indexing process.

Any video or doc that i can refer.

Any Help is Appreciated,

Thanks.

Tags (3)
0 Karma
1 Solution

dmaislin_splunk
Splunk Employee
Splunk Employee

harshavrath
Contributor

can you provide an example or link as how to use the outputlookup command.

0 Karma

dmaislin_splunk
Splunk Employee
Splunk Employee

Now just use the outputlookup search command once the data is indexed to create the lookup table with a scheduled job.

0 Karma

harshavrath
Contributor

the query works
SELECT * FROM table_NM WHERE ROWNUM<=30 AND TRUNC(CREATED_DT) BETWEEN to_date('04-10-2014','mm/dd/yyyy') AND to_date('04-10-2014','mm/dd/yyyy') {{AND $rising_column$ > ?}} ORDER BY CREATED_DT ASC
i was able to index data into splunk.

0 Karma

dmaislin_splunk
Splunk Employee
Splunk Employee

You did not describe the issue. Just import the data into Splunk, leave the order statement off the query and use Splunk command | sort - CREATED_DT_ASC | outputlookup yourlookuptable.csv

0 Karma

dmaislin_splunk
Splunk Employee
Splunk Employee

Does the query work when you test it? Does the data show up in Splunk?

0 Karma

harshavrath
Contributor

if i schedule an cron how will i be able to solve the CREATED_DT issue..?

0 Karma

harshavrath
Contributor

this is the query that i use to index data into splunk

0 Karma

harshavrath
Contributor

SELECT * FROM table_NM WHERE ROWNUM<=30 AND TRUNC(CREATED_DT) BETWEEN to_date('04-10-2014','mm/dd/yyyy') AND to_date('04-10-2014','mm/dd/yyyy') {{AND $rising_column$ > ?}} ORDER BY CREATED_DT ASC

0 Karma

dmaislin_splunk
Splunk Employee
Splunk Employee

You can put it in cron format:

0 0 * * *

Would execute your script at 12 am every day of every week of every month.

A cron statement consists of five parts:

minute
hour
day of month
month
day of week

http://code.tutsplus.com/tutorials/scheduling-tasks-with-cron-jobs--net-8800

0 Karma

harshavrath
Contributor

hi did you refer to "Specify query interval"

0 Karma
Get Updates on the Splunk Community!

Synthetic Monitoring: Not your Grandma’s Polyester! Tech Talk: DevOps Edition

Register today and join TekStream on Tuesday, February 28 at 11am PT/2pm ET for a demonstration of Splunk ...

Instrumenting Java Websocket Messaging

Instrumenting Java Websocket MessagingThis article is a code-based discussion of passing OpenTelemetry trace ...

Announcing General Availability of Splunk Incident Intelligence!

Digital transformation is real! Across industries, companies big and small are going through rapid digital ...