Getting Data In

Created column will use as DBconnect Rising Column setup is advisable?

vin_ven27
Explorer

I am using DBconnect to pull data in database then the setup would be RISING.  Using SQL to select data from database. There are 3 dates from database column and I will convert to epoch time then the highest epoch time will be created as column (MaxDate) to be use as RISING COLUMN. 

Questions:

May i know if the MaxDate will work in RISING COLUMN?

If yes, I encountered "java.sql.SQLException: Parameter #1 has not been set." is there anyone could help? 

Or other ways cause our only choice is to use the date max to be able to pull the updated one. Thanks

Labels (1)
Tags (2)
0 Karma

vin_ven27
Explorer

Thanks for your help. 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

The column used as the Rising Column must exist in the database.  That is, it must be something that can be included in the WHERE clause of a SELECT statement.  If you can compare the three dates using SQL then that might work.  The value used in the Rising Column must be in a format supported by your SQL database.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...