All Apps and Add-ons

How can I find out that DB Connect is not ingesting the batch data?

Adam_Marx
Explorer

I'm attempting to get DB Connect working and I have successfully scheduled my job and set up my connection. When executing my SQL in the Preview Data window my results are as expected. I'm using "Current Index Time" since my data does not have a specific time field, all good so far.

Now comes the problem, the job is executing without error and on time from what I can see in the DB Connect Input Health tab, however, none of my data is being ingested.

How can I find out why my data is not being ingested.

Thanks for any insight,

0 Karma

Adam_Marx
Explorer

It appears to be executing...

...
    2018-05-01 06:00:07.410 -0400  [QuartzScheduler_Worker-1] INFO  org.easybatch.core.job.BatchJob - Job 'CubLoad_6am' started
    2018-05-01 06:00:07.411 -0400  [QuartzScheduler_Worker-1] INFO  org.easybatch.core.job.BatchJob - Job 'CubLoad_6am' stopping
    2018-05-01 06:00:07.418 -0400  [QuartzScheduler_Worker-1] INFO  org.easybatch.core.job.BatchJob - Job 'CubLoad_6am' finished with status: COMPLETED

Can I see a record count of records that are or are not ingested? and if I can't can I manually execute the job?

0 Karma

kmaron
Motivator

have you checked the _internal logs? look for sourcetype=dbx_audit

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security(ES) 7.3 is approaching the end of support. Get ready for ...

Hi friends!    At Splunk, your product success is our top priority. With Enterprise Security (ES), we're here ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk, and empower your SOC to reach new heights! Duration: 1 hour  Prepare to ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...