All Apps and Add-ons

DB connect 313 NULL-fields returned for varchar type

New Member

Hi all,
I installed and configured db connect 313 but all queries return blank for the varchar2 fields.
Instead, the Number and Date fields are extracted correctly

DB version is oracle 9.

alt text

Thanks a lot

0 Karma

Communicator

@vishaltaneja07011993 is correct. If you can’t go that far, you can modify your SQL query to CAST or CONVERT the column to a type that Splunk can handle.

0 Karma

Motivator

Hello @antoniofaraone

You need to create template which will get the data in a different format. You can place the field which is the very big in the middle of the template to avoid them breaking. Ofcourse, if your event has more than 10k characters, you might want to increase the TRUNCATE value.

This answer can help you out i guess:

https://answers.splunk.com/answers/172153/why-splunk-db-connect-is-not-properly-importing-da.html
0 Karma