Splunk Enterprise

db query not working

pratapa
Explorer

Following db query not working.

| dbquery wmsewprd select REC_TYPE, CODE_TYPE, CODE_DESC, SHORT_DESC, USER_ID, To_Char(mod_date_time,'dd/mm/yyyy hh:mi:ss AM') AS MOD_DATE_TIME from SYS_CODE_TYPE where rec_type = 'C' and code_type = 'AWO'
and (sysdate - mod_date_time)*24*60 < 60"

 

Getting following error.

command="dbquery", A database error occurred: ORA-00942: table or view does not exist

 

But the table SYS_CODE_TYPE does exist.

 

When we run the following query it is returning events.

dbquery wmsewprd "select REC_TYPE, CODE_TYPE, CODE_DESC, SHORT_DESC, USER_ID from SYS_CODE_TYPE"

What could be the problem

0 Karma

richgalloway
SplunkTrust
SplunkTrust
Have you checked the logs to see if more detail is provided? Look at splunk_app_db_connect_dbx_log.* and splunk_app_db_connect_server.log.
Also, see what is reported in Oracle's logs.
---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...