All Apps and Add-ons

DB Connect 3.1.4 - Results are being pre-pended with ORDERBYLIST_***.Schema_Name.Table_Name

lroynsky
Explorer

Hoping someone on here has some insight into this problem I am facing currently.

I have a few inputs running using a HIVE DB connection. The inputs themselves are working, however I sometimes notice missing fields (columns) from the results as well as orderbylist_b4dbf9fd.SCHEMA_NAME_TABLE_NAME pre-pended to the results in the index. So instead of field_Blah="123" I see orderbylist_b4dbf9fd.SCHEMA_NAME_TABLE_NAMEfield_Blah="123" in the results.

This isn't a singular issue, it affects multiple HIVE inputs however not all of them. Strangely enough this issue started happening in early August, before then the results were normal.

I've attempted re-creating the input to no avail (however, the missing fields started to populate again).

Any help is very much appreciated.

0 Karma
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...