Using timestamp as "rising column" in DBconnect v3: Missing IN or OUT parameter at index:: 1

[dailv1808]

Hi Splunker,

I tried to use timestamp as "rising column" but it didnt work.

Please help!!!

when input type = Rising

[dailv1808]

Need help!!

[scelikok]

Hi @dailv1808,

Can you please try formatting TXTIME as epoch format? 

[scelikok]

Hi @dailv1808,

After changing to Rising mode you have to execute query once. Then you should update your query with where clause. Most probably error reason is checkpoint "?" variable has no value yet. 

If that does not work you can update checkpoint value with a valid time value from your results.

[dailv1808]

Hi @scelikok 

Thanks for you reply, it doesn't work. When changing to Rising mode, Splunk need filter the rising column with a WHERE statement and sort the results with ORDER BY. "java.sql.SQLException: Invalid column index"