All Apps and Add-ons

How can I configure an output template for DB Connect 2 inputs?

dmonsag
Explorer

I'm extracting data from an Oracle database and need to configure a particular template for the events retrieved in the query. As the event is larger than 4K it cant be retrieved as a single column and it was necesary to concatenate the event using a TEMPLATE in DBX1. Is it posible to make this same configuration on DBConnect2?

Tags (1)
0 Karma
1 Solution

jcoates_splunk
Splunk Employee
Splunk Employee

Hi, the output template has been removed from DB Connect 2. Instead, we recommend using rex and eval commands to control formatting. http://docs.splunk.com/Documentation/DBX/2.0.2/DeployDBX/UpgradingfromDBConnect1.1.xtoDBConnect2.0.x

Huh... reading the rest of your comment, you're trying to do something unusual. Please email me (jack at splunk) and we can look at this in more detail.

View solution in original post

jcoates_splunk
Splunk Employee
Splunk Employee

Hi, the output template has been removed from DB Connect 2. Instead, we recommend using rex and eval commands to control formatting. http://docs.splunk.com/Documentation/DBX/2.0.2/DeployDBX/UpgradingfromDBConnect1.1.xtoDBConnect2.0.x

Huh... reading the rest of your comment, you're trying to do something unusual. Please email me (jack at splunk) and we can look at this in more detail.

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Enhance Security Operations with Automated Threat Analysis in the Splunk EcosystemAre you leveraging ...

What Is Splunk? Here’s What You Can Do with Splunk

Hey Splunk Community, we know you know Splunk. You likely leverage its unparalleled ability to ingest, index, ...

Level Up Your .conf25: Splunk Arcade Comes to Boston

With .conf25 right around the corner in Boston, there’s a lot to look forward to — inspiring keynotes, ...