I use Splunk Enterprise 6.3.3 (I also tried before with the Splunk Enterprise 6.4) with the app Splunk DB Connect 2.2.0 (I also tried with Splunk DB Connect 2.1.3)
It's always the same problem... I can configure easily Splunk DB Connect but I can't find the data ine the "Search & Reporting" window...
I don't know why because I can see the data in Operations/DB Inputs/MyInput/Choose and Preview Table......
In MyInput they say that i'm in "valid connection"...
At the step 4/4 they say "succesfully"
All work but I can searche in "Search & Reporting"
Can you help me please? I don't understand...
Thanx a lot
I have got Splunk Enterprise, I got it for free and I paid nothing : So I have got the "Enterprise Trial License" :
Thanx for your answer!
Unfortunately according to the documentation for DB Connect:
"Splunk DB Connect has not been tested and is not supported with Splunk Cloud, Splunk Free, or Splunk Light."
Hi, would be nice to know what your SPL-Command looks like.
Have you created an extra index and/or sourcetype for the DBConnect Data? Make sure you are searching against this specific index. (index= .... ).
If your index is not searched by default for the admin role you will get no results by simply doing [sourcetype=xxxx] or stuff like this.