Security

Splunk DB Connect: Why am I getting error that a value is "outside the valid range for the dataype INTEGER" in an Unsigned Integer column?

KindaWorking
Path Finder

I am using DB connect to access a table that has the rising column set as an Unsigned Integer.
If I look at the table using Database Info, the type is correctly identified as INT UNSIGNED.
This column contains numbers larger than a normal INT would allow.

When I attempt to view information for this column I get the following error:

03-09-2015 08:36:24.402 +1100 ERROR AdminManagerExternal - Received malformed XML from external handler:\nFailed to validate: com.splunk.config.SplunkConfigurationException: Error validating dbmonTail for monitor=dbmon-tail://DBNAME/TABLENAME: '2.813426101E9' in column '1' is outside valid range for the datatype INTEGER.

So it looks like it is viewing this as a normal integer. Is there a reason for this? Is this something I can fix without modifying the SQL database?

0 Karma

jcoates_splunk
Splunk Employee
Splunk Employee

is this the rising column?

0 Karma

KindaWorking
Path Finder

Yes it is.

0 Karma

jcoates_splunk
Splunk Employee
Splunk Employee

I think that has to be an integer... maybe try adding a CAST to your SQL statement?

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...