All Apps and Add-ons

splunk db connect error -- data truncation data too long for column

jingqin
New Member

my splunk db connect app version is 2.2.0.
my job is to find top 20 'uri'.
I saw the following error msg on dbx2.log:
error=ERROR: Data truncation: Data too long for column 'uri' at row 1.
How can I modify the limitation of truncation?

0 Karma

paulbannister
Communicator

Hi There,

In the associated props.conf for the particular sourcetype in question (db connect app and system) you should be able to set TRUNCATE=0 which will remove the truncation limit, this may have been answered in more detail in a previous question:

https://answers.splunk.com/answers/232604/dbconnect-events-truncate-despite-propsconf.html

It might also be worth updating to the latest version of DBConnect as there have been an array of performance improvements since 2.2

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...