All Apps and Add-ons

splunk db connect error -- data truncation data too long for column

jingqin
New Member

my splunk db connect app version is 2.2.0.
my job is to find top 20 'uri'.
I saw the following error msg on dbx2.log:
error=ERROR: Data truncation: Data too long for column 'uri' at row 1.
How can I modify the limitation of truncation?

0 Karma

paulbannister
Communicator

Hi There,

In the associated props.conf for the particular sourcetype in question (db connect app and system) you should be able to set TRUNCATE=0 which will remove the truncation limit, this may have been answered in more detail in a previous question:

https://answers.splunk.com/answers/232604/dbconnect-events-truncate-despite-propsconf.html

It might also be worth updating to the latest version of DBConnect as there have been an array of performance improvements since 2.2

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...