DBConnect 2 batch input

[ddas]

When creating a new input in DB Connect 2 if I set type as Batch input, does it mean that the Splunk index will delete all old data in the assigned index and populate it with the new data at every scheduled interval? Or is the new data simply going to be appended to the index.

[jcoates_splunk · Accepted solution]

appended. Use a rising column tail to avoid duplication.