All Apps and Add-ons
Highlighted

How to change the Checkpoint Value in a Splunk DB Connect 2 input for the rising column?

Builder

Hi all,

How to change the Checkpoint Value in a Splunk DB Connect 2 input for rising column?
Current Checkpoint value=2023-10-04 09:53:43.0, it's not indexing any events.

Highlighted

Re: How to change the Checkpoint Value in a Splunk DB Connect 2 input for the rising column?

Communicator

Go to $SPLUNKHOME/etc/apps/splunkappdbconnect/defaults/inputs.conf, and look for tailrisingcolumncheckpointvalue. You can either remove that line altogether or change the timestamp to some other value. Note that this may re-index records you may have already indexed, unless you delete them from Splunk first. If you don't see the checkpoint value under the default folder, then look under local. You may need to restart Splunk after updating inputs.conf.

View solution in original post

Highlighted

Re: How to change the Checkpoint Value in a Splunk DB Connect 2 input for the rising column?

Builder

Its changing again once it ran.. How to solve this issue

0 Karma
Highlighted

Re: How to change the Checkpoint Value in a Splunk DB Connect 2 input for the rising column?

Communicator

It always updates with the timestamp of the last record it indexed, so it knows where to pick up when new records are added to the database. Also, I just noticed that the timestamp in your example has 2023 for the year. If new records are added to your database with a year less than that (i.e. 2016) they won't get indexed.

0 Karma
Highlighted

Re: How to change the Checkpoint Value in a Splunk DB Connect 2 input for the rising column?

Builder

Is this the issue with query?

0 Karma