I have an issue where querying Oracle 9 DB using DB connect. All fields that are varchar returned as empty, but for numeric or date it is returning correcting.
Say if I run on SQL explorer "Select sysdate from dual" or "select count(*) from table_A" I will get the expected result, but running "select transactionid from table_a;" it will return multiple rows of empty data.
And if I run "select sysdate, transactionid from table_a;" I will get sysdate correctly but transactionid field as empty.
I try to added as input, but when I check the events all the varchar fields does not exists in the events. Using "select sysdate, transactionid from table_a;", I can see sysdate in the event but not transactionid.
if I run the query in SQL developer it is all working perfectly fine.
For other DB input I am using, I don't have this issue.
I have trying add the query as input, cast the varchar fields but nothing seems to work.
Just wonder if anyone has any ideas how could I work around this?
Below is the information of DB and Splunk:
DB is Oracle - Version: 9.2.0.8.0
Splunk Version: 7.2.5
Current Application: Splunk DB Connect
App Version 3.1.3
