Splunk Enterprise

Why is dbxquery not fetching the large number of data from database?

Ashwini008
Builder

Hi,

I am using dbxquery to fetch the db data ,the db data is huge hence i am using maxrows=56406002.

But the query is keeping loading for 30-40 mins and later throws an error as below even though i am fetching only one year data

'Search auto-canceled'
'The search job has failed due to an error'

'| dbxquery connection=XXX query="SELECT DATE, ENDDATE, BEGDA, ENDDA FROM  PA2001 where BEGDA>=20160101 AND BEGDA<=20161231" maxrows=56406002
| streamstats count as SL_NO |table DATE ENDDATE BEGDA ENDDA SL_NO'
Labels (3)
Tags (2)
0 Karma
Get Updates on the Splunk Community!

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...