Splunk Cloud Platform

How to get db connect exception with timestamp via query

Marta88
Explorer

Hi,

I am looking for a query to get list of DBConnect exceptions with their timestamp in order to plot them in a graph.

Thank you

Kind regards

Marta

Labels (2)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

What events do you have ingested into Splunk showing this condition?

0 Karma

Marta88
Explorer

Splunk is logging something in the index=_internal. For instance if I run "index=_internal dbconnect" I see something but I am not sure that this is the exact query.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Are the events you are interested in returned by this search?

Do you need to filter further e.g. 

index=_internal dbconnect exception
0 Karma

Marta88
Explorer

Actually the event I am interest in are not returned by this search. I noticed that this search is returning as event the query that I am doing.  Maybe I should search a different index.

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...