Splunk Cloud Platform

How to get db connect exception with timestamp via query

Marta88
Explorer

Hi,

I am looking for a query to get list of DBConnect exceptions with their timestamp in order to plot them in a graph.

Thank you

Kind regards

Marta

Labels (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

What events do you have ingested into Splunk showing this condition?

0 Karma

Marta88
Explorer

Splunk is logging something in the index=_internal. For instance if I run "index=_internal dbconnect" I see something but I am not sure that this is the exact query.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Are the events you are interested in returned by this search?

Do you need to filter further e.g. 

index=_internal dbconnect exception
0 Karma

Marta88
Explorer

Actually the event I am interest in are not returned by this search. I noticed that this search is returning as event the query that I am doing.  Maybe I should search a different index.

0 Karma
Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...