Splunk DB Connect 2: Is there a way to get just new rows, not every row in the table each time I connect to a database?

[adacpt]

When connecting to a database using Splunk DB Connect 2, is there a way just to get new rows? Otherwise, I get every row in the table each time I connect.

[richgalloway · Accepted solution]

Turn on the "Follow tail" option in your DB Connect 2 input. You will need to designate a column to be the "rising_column" for that query. This column's value is always increasing and is used by DB Connect to pick up where it left off. Timestamps are often good rising_column candidates.