All Apps and Add-ons

Splunk DB connect app not pulling all rows.

joydeep741
Path Finder

I have 100 rows in DataBase.
I use Splunk DB connect app to pull data to splunk.
I see 98 rows indexed in Splunk.

How should I identify the missing 2 rows. (Assuming each row has a unique ID column in it) ?

0 Karma

briancronrath
Contributor

Can you connect direct to the db outside of splunk with a client? If so, export the results to csv from splunk, and do the same from your client, and do a diff on the two csvs.

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!