my splunk db connect app version is 2.2.0.
my job is to find top 20 'uri'.
I saw the following error msg on dbx2.log:
error=ERROR: Data truncation: Data too long for column 'uri' at row 1.
How can I modify the limitation of truncation?
Hi There,
In the associated props.conf for the particular sourcetype in question (db connect app and system) you should be able to set TRUNCATE=0 which will remove the truncation limit, this may have been answered in more detail in a previous question:
https://answers.splunk.com/answers/232604/dbconnect-events-truncate-despite-propsconf.html
It might also be worth updating to the latest version of DBConnect as there have been an array of performance improvements since 2.2