Splunk DB Connect: How to pull data from two Oracle database connections at once?

[bobbyfair]

I'm using Splunk DB Connect app and I downloaded the Oracle TA , installed and using Unix from the back end and gave two connections for the Splunk DB Connect app. I did the complete process from the back end even like creating inputs.conf and database.conf. I mentioned the connection names and everything clearly. I can pull the data from one connection, but the problem is that I want to see both of the data at once which I can't. Can someone help me out with that please?

Thanks

[nravichandran]

Not clear on your question. "I want to see both of the data at once which I can't" - Do you want to join/query tables across oracle instances? If yes, please test if you have linked server and if you are able to query the link server from the oracle instance. In order to be simple, you can create create a materialized view and then from the dbconnect query that materialized view. Hope this helps.

[jcoates_splunk]

not sure what is going on here, so here are some guesses:

1. one of the inputs isn't working -- look at the DB Connect health dashboard to validate that they're both running
2. one of the inputs is writing into an index that you're not searching by default -- check roles, indexes searched by default, or specify (index=foo OR index=bar) in your search
3. one of the inputs is reading data that splunk can't index, like BLOBs or something -- look for errors in splunkd logs

[somesoni2]

What is your report requirement? Would commands like append work for your requirements (appending query result for both connection in one search)