All Apps and Add-ons

Why are the DB Connect queries executed twice?

mvanberg
Explorer

I'm using DB Connect to update tables in a database, as well as pull them, but every time I execute the queries they happen twice.

Example:

When adding a row to a ledgers table, say a $10 deposit, Splunk will run the query twice and I get $20 worth of deposits.

I think this is a bug, but I'm trying to see if anyone else has seen this problem and if so if they have a fix.

Notes:
- I'm using the tested and approved Postgres drivers
- Splunk 7.0.2
- DB Connect 3.1.2
- This happens in a dashboard, ad-hoc search, and sql explorer

Log example from splunk_app_db_connect_audit_command:

2018-03-15 22:40:17.599 PORT@HOST [main] INFO com.splunk.dbx.connector.logger.AuditLogger - operation=dbxquery connection_name=CONNECTION stanza_name= state=success sql='SQLQUERY1'
2018-03-15 22:40:18.758 PORT@HOST [main] INFO com.splunk.dbx.connector.logger.AuditLogger - operation=dbxquery connection_name=CONNECTION stanza_name= state=success sql='SQLQUERY1'

(Data is obfuscated for security purposes)

vincegee777
Engager

I got the same problem too, did anyone get a solution to this?

0 Karma
Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

  Ready to master Kubernetes and cloud monitoring like the pros?Join Splunk’s Growth Engineering team for an ...

Wrapping Up Cybersecurity Awareness Month

October might be wrapping up, but for Splunk Education, cybersecurity awareness never goes out of season. ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...