All Apps and Add-ons

splunk db connect error -- data truncation data too long for column

jingqin
New Member

my splunk db connect app version is 2.2.0.
my job is to find top 20 'uri'.
I saw the following error msg on dbx2.log:
error=ERROR: Data truncation: Data too long for column 'uri' at row 1.
How can I modify the limitation of truncation?

0 Karma

paulbannister
Communicator

Hi There,

In the associated props.conf for the particular sourcetype in question (db connect app and system) you should be able to set TRUNCATE=0 which will remove the truncation limit, this may have been answered in more detail in a previous question:

https://answers.splunk.com/answers/232604/dbconnect-events-truncate-despite-propsconf.html

It might also be worth updating to the latest version of DBConnect as there have been an array of performance improvements since 2.2

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Rounding off the Splunk Dashboard Contest

What does a contest-winning Splunk dashboard look like? In this case, it isn't in a browser tab at all. It ...

A Four Part Event Series: AI + Observability: AI Agents, LLMs, Apps, & Infrastructure

AI + Observability: AI Agents, LLMs, Apps, & Infrastructure The rapid evolution of artificial intelligence ...