Splunk Search

Can we retrieve data using DBConnect for rows which got modified?

ddrillic
Ultra Champion

Is it possible to retrieve data using DBConnect for rows which got modified? And not included via the rising column?

Tags (3)
0 Karma
1 Solution

DavidHourani
Super Champion

@ddrillic,

No not possible.. typically you want to use the rising column field as the modification date to achieve that. If you don't you'll have to grab the entire DB as batch to monitor for change.

Cheers,
David

View solution in original post

DavidHourani
Super Champion

@ddrillic,

No not possible.. typically you want to use the rising column field as the modification date to achieve that. If you don't you'll have to grab the entire DB as batch to monitor for change.

Cheers,
David

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

What Is Splunk? Here’s What You Can Do with Splunk

Hey Splunk Community, we know you know Splunk. You likely leverage its unparalleled ability to ingest, index, ...

Level Up Your .conf25: Splunk Arcade Comes to Boston

With .conf25 right around the corner in Boston, there’s a lot to look forward to — inspiring keynotes, ...

Manual Instrumentation with Splunk Observability Cloud: How to Instrument Frontend ...

Although it might seem daunting, as we’ve seen in this series, manual instrumentation can be straightforward ...