All Apps and Add-ons

How do I get the number of counts injected into Splunk from Oracle database though DB connect?

rakesh44
Communicator

Hi Friends,

I have DB connect which pulls logs from Oracle database into Splunk. I found that some data was missing from Splunk. When we checked same data in the Oracle logs, that data is available. Hence, we need to know how to compare the number of count from Oracle database with Splunk.

I know how to get a count in Splunk

| tstats count where index=test by sourcetype ( This will give a count in Splunk )

How do I get a count in the database which we are injecting?

0 Karma
1 Solution

tiagofbmm
Influencer

You need to use dbxquery command to search for that on the database:

https://docs.splunk.com/Documentation/DBX/3.1.4/DeployDBX/Commands

View solution in original post

0 Karma

tiagofbmm
Influencer

You need to use dbxquery command to search for that on the database:

https://docs.splunk.com/Documentation/DBX/3.1.4/DeployDBX/Commands

View solution in original post

0 Karma

rakesh44
Communicator

Hi Tiago,

I tried referring above URL to understand which command and syntax is useful to pull count from database, but fail to understand command and syntax -:) . Do you have idea abt command and syntax which suits in this case.Thanks

0 Karma

tiagofbmm
Influencer

| dbxquery query="SELECT COUNT(*) FROM <table>" connection="<yourconnection>"

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!