DB connect 313 NULL-fields returned for varchar type

[antoniofaraone]

Hi all,
I installed and configured db connect 313 but all queries return blank for the varchar2 fields.
Instead, the Number and Date fields are extracted correctly

DB version is oracle 9.

Thanks a lot

[jcoates]

@vishaltaneja07011993 is correct. If you can’t go that far, you can modify your SQL query to CAST or CONVERT the column to a type that Splunk can handle.

[vishaltaneja070]

Hello @antoniofaraone

You need to create template which will get the data in a different format. You can place the field which is the very big in the middle of the template to avoid them breaking. Ofcourse, if your event has more than 10k characters, you might want to increase the TRUNCATE value.

This answer can help you out i guess:

https://answers.splunk.com/answers/172153/why-splunk-db-connect-is-not-properly-importing-da.html