Splunk Enterprise

Why is dbxquery not fetching the large number of data from database?

Ashwini008
Builder

Hi,

I am using dbxquery to fetch the db data ,the db data is huge hence i am using maxrows=56406002.

But the query is keeping loading for 30-40 mins and later throws an error as below even though i am fetching only one year data

'Search auto-canceled'
'The search job has failed due to an error'

'| dbxquery connection=XXX query="SELECT DATE, ENDDATE, BEGDA, ENDDA FROM  PA2001 where BEGDA>=20160101 AND BEGDA<=20161231" maxrows=56406002
| streamstats count as SL_NO |table DATE ENDDATE BEGDA ENDDA SL_NO'
Labels (3)
Tags (2)
0 Karma
Get Updates on the Splunk Community!

Splunk App for Anomaly Detection End of Life Announcment

Q: What is happening to the Splunk App for Anomaly Detection?A: Splunk is officially announcing the ...

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...