I'm using DB Connect to update tables in a database, as well as pull them, but every time I execute the queries they happen twice.
Example:
When adding a row to a ledgers table, say a $10 deposit, Splunk will run the query twice and I get $20 worth of deposits.
I think this is a bug, but I'm trying to see if anyone else has seen this problem and if so if they have a fix.
Notes:
- I'm using the tested and approved Postgres drivers
- Splunk 7.0.2
- DB Connect 3.1.2
- This happens in a dashboard, ad-hoc search, and sql explorer
Log example from splunk_app_db_connect_audit_command:
2018-03-15 22:40:17.599 PORT@HOST [main] INFO com.splunk.dbx.connector.logger.AuditLogger - operation=dbxquery connection_name=CONNECTION stanza_name= state=success sql='SQLQUERY1'
2018-03-15 22:40:18.758 PORT@HOST [main] INFO com.splunk.dbx.connector.logger.AuditLogger - operation=dbxquery connection_name=CONNECTION stanza_name= state=success sql='SQLQUERY1'
(Data is obfuscated for security purposes)
I got the same problem too, did anyone get a solution to this?