All Apps and Add-ons

Splunk DB 3 connect fetching the last DB record repeatedly

swati_singh
Engager

I am connecting to MS SQL server to fetch records into Splunk using Rising column. The rising column is a datetime column. When the execution runs then SplunkDBConnect pulls all available records, so first time it runs as expected. From the second poll it starts getting the last record again and hence leading to data duplication in Splunk environment.
My query is SELECT * FROM WHERE StartTime > ? ORDER BY StartTime ASC.
The coulmn StartTime has datetime datatype.

I also see updates going to checkpoint file. I currently poll every 60 seconds.

Has anyone seen such a behavior?

Thanks,
Swati

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...