How do I get the number of counts injected into Splunk from Oracle database though DB connect?

[rakesh44]

Hi Friends,

I have DB connect which pulls logs from Oracle database into Splunk. I found that some data was missing from Splunk. When we checked same data in the Oracle logs, that data is available. Hence, we need to know how to compare the number of count from Oracle database with Splunk.

I know how to get a count in Splunk

| tstats count where index=test by sourcetype ( This will give a count in Splunk )

How do I get a count in the database which we are injecting?

[tiagofbmm · Accepted solution]

You need to use dbxquery command to search for that on the database:

https://docs.splunk.com/Documentation/DBX/3.1.4/DeployDBX/Commands

[rakesh44]

Hi Tiago,

I tried referring above URL to understand which command and syntax is useful to pull count from database, but fail to understand command and syntax -:) . Do you have idea abt command and syntax which suits in this case.Thanks

[tiagofbmm]

| dbxquery query="SELECT COUNT(*) FROM <table>" connection="<yourconnection>"