All Apps and Add-ons

Why are the DB Connect queries executed twice?

mvanberg
Explorer

I'm using DB Connect to update tables in a database, as well as pull them, but every time I execute the queries they happen twice.

Example:

When adding a row to a ledgers table, say a $10 deposit, Splunk will run the query twice and I get $20 worth of deposits.

I think this is a bug, but I'm trying to see if anyone else has seen this problem and if so if they have a fix.

Notes:
- I'm using the tested and approved Postgres drivers
- Splunk 7.0.2
- DB Connect 3.1.2
- This happens in a dashboard, ad-hoc search, and sql explorer

Log example from splunk_app_db_connect_audit_command:

2018-03-15 22:40:17.599 PORT@HOST [main] INFO com.splunk.dbx.connector.logger.AuditLogger - operation=dbxquery connection_name=CONNECTION stanza_name= state=success sql='SQLQUERY1'
2018-03-15 22:40:18.758 PORT@HOST [main] INFO com.splunk.dbx.connector.logger.AuditLogger - operation=dbxquery connection_name=CONNECTION stanza_name= state=success sql='SQLQUERY1'

(Data is obfuscated for security purposes)

vincegee777
Engager

I got the same problem too, did anyone get a solution to this?

0 Karma
Get Updates on the Splunk Community!

Celebrating Fast Lane: 2025 Authorized Learning Partner of the Year

At .conf25, Splunk proudly recognized Fast Lane as the 2025 Authorized Learning Partner of the Year. This ...

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...