All Apps and Add-ons

Splunk DB Connect 2: Why am I not getting any events from one input?

kranthi851
New Member

Hi all,

I have an issue with a Splunk DB Connect input. I'm getting events from all inputs, but not from one input, so I created a new input (disabled old one), but it runs for only some time and not able to get events.

alt text
Checkpoint value = 2023-10-04 09:53:43.0 for a rising column(EVENT_TIME)

Is checkpoint value is the problem?

0 Karma
1 Solution

hogan24
Path Finder

Yes I believe the checkpoint value is the issue b/c it's only going to look for events after that time. Assuming you have no events after the year 2023 already in your DB, then yes, that is the problem.

View solution in original post

0 Karma

hogan24
Path Finder

Yes I believe the checkpoint value is the issue b/c it's only going to look for events after that time. Assuming you have no events after the year 2023 already in your DB, then yes, that is the problem.

0 Karma

kranthi851
New Member

Thanks for response. Is this because of the query , Can you let me know how can i solve this one?

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Anything in the logs (dbx.log, dbx2.log, splunkd.log)?

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Using the Splunk Threat Research Team’s Latest Security Content

REGISTER HERE Tech Talk | Security Edition Did you know the Splunk Threat Research Team regularly releases ...

SplunkTrust | 2024 SplunkTrust Application Period is Open!

It's that time again, folks! That's right, the application/nomination period for the 2024 SplunkTrust is ...