All Apps and Add-ons

How to properly configure db input on DB Connect Version 3 to pull huge amount of data?

sshres5
Communicator

We upgraded the db connect to the new version 3 but now we are facing the issue of not being able to get data. Moreover the ORDER BY seems to be causing the issue.
We are trying to pull 1000-100000s of row per minute and not getting any success. The query works in the first place, as we are able to preview the data on Choose and Preview Table. As well as able to get data in Splunk itself before it breaks down on next attempt 😞

0 Karma

dvergnes_splunk
Splunk Employee
Splunk Employee

Did you have relevant logs to share? You can search index=_internal sourcetype=dbx_server and probably add a condition with your input name to limit to only see the relevant events.

0 Karma

adonio
Ultra Champion
0 Karma

sshres5
Communicator

Yeah my query already has it.

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...