All Apps and Add-ons

DB Connect 3.1.4 - Results are being pre-pended with ORDERBYLIST_***.Schema_Name.Table_Name

lroynsky
Explorer

Hoping someone on here has some insight into this problem I am facing currently.

I have a few inputs running using a HIVE DB connection. The inputs themselves are working, however I sometimes notice missing fields (columns) from the results as well as orderbylist_b4dbf9fd.SCHEMA_NAME_TABLE_NAME pre-pended to the results in the index. So instead of field_Blah="123" I see orderbylist_b4dbf9fd.SCHEMA_NAME_TABLE_NAMEfield_Blah="123" in the results.

This isn't a singular issue, it affects multiple HIVE inputs however not all of them. Strangely enough this issue started happening in early August, before then the results were normal.

I've attempted re-creating the input to no avail (however, the missing fields started to populate again).

Any help is very much appreciated.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...