Splunk Search

DBConnect fetch not to consider latest value of rising column

pradeepkumarg
Influencer

The rising column I'm using is a time stamp and at times there are many records with the same value and if the fetch happens in the middle of those records, DBConnect is missing the rest of the records coming with the same value.

How can I limit the fetch not to consider the latest value so that all of them are fetched in the next run.

Example rising column value - dateUpdated - 2014-08-05 13:39:00.0

0 Karma
1 Solution

pradeepkumarg
Influencer

pradeepkumarg
Influencer

I found the answer mentioned in the below thread solves the purpose

http://answers.splunk.com/answers/68699/database-table-doesnt-have-rising-column-totally

Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...