All Apps and Add-ons

How to troubleshoot why Splunk DB Connect 2 is not indexing any data?

chrisduimstra
Path Finder

I have a single search head and a single separate indexer. The app is installed on the search head and I have created a new index for the app on the indexer. So far I have been able to get a valid connection and can query the database using the dbxquery command.

However, I have not been able to get Splunk to index the data. I created a DB Input which has a valid connection and is using a query that shows the data from the database. I have tried a batch input as well as rising column, but neither log any data to the index.

0 Karma
1 Solution

chrisduimstra
Path Finder

I was able to get the data indexed by installing the app on the indexer.

View solution in original post

0 Karma

chrisduimstra
Path Finder

I was able to get the data indexed by installing the app on the indexer.

0 Karma

ryanoconnor
Builder

Chris, as a best practice you should also be forwarding all logs from your Search Head to your indexer. See the following document:

http://docs.splunk.com/Documentation/Splunk/6.4.1/DistSearch/Forwardsearchheaddata

0 Karma

ryanoconnor
Builder

When you run your sample query while setting up the input, do you return data?

Do you have an enterprise license installed?

Is your query set to run a certain schedule?

Have you looked at Splunk's _internal logs to see if anything is coming up related to when the query is scheduled to run?

0 Karma
Get Updates on the Splunk Community!

How I Instrumented a Rust Application Without Knowing Rust

As a technical writer, I often have to edit or create code snippets for Splunk's distributions of ...

Splunk Community Platform Survey

Hey Splunk Community, Starting today, the community platform may prompt you to participate in a survey. The ...

Observability Highlights | November 2022 Newsletter

 November 2022Observability CloudEnd Of Support Extension for SignalFx Smart AgentSplunk is extending the End ...