Splunk Search

DB Connect not resolving MySQL Table column names

sanujss
Explorer

I have connected to a MySQL Table which has 10 columns using DB Connect. It gets the data in search. But in the search, it doesn't show as columns in "Table" view.I can see all the fields as comma separated in Raw and List format. What to do for this ?

0 Karma
1 Solution

sanujss
Explorer

Finally got it fixed . I used Key Value as the source type than CSV. Now it is perfectly resolving the columns without any additional configuration changes 🙂

View solution in original post

0 Karma

sanujss
Explorer

Finally got it fixed . I used Key Value as the source type than CSV. Now it is perfectly resolving the columns without any additional configuration changes 🙂

0 Karma

sanujss
Explorer

Also, When I do DB Queries, it is properly showing as columns. But I don't want to run queries every time and it could affect the DB performance as it tries to run complex queries

0 Karma

sanujss
Explorer

It is showing data. But all the columns are clubbed together and showing in one column. If I load a CSV file, and view in table mode, it resolves the column names and shows like a neat table. But that is not happening when I connect the DB directly

0 Karma

araitz
Splunk Employee
Splunk Employee

I'm not sure I quite understand. Do you mean that when you look at the results in the search view "table" mode, nothing shows up? If so, can you try adding " | table *" to the end of your search?

0 Karma

treywebb
Explorer

Add the fields as selected fields and they should then show up in the table view.

0 Karma

sanujss
Explorer

the fields are not showing up for selection. that is the issue

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Mastering Threat Intelligence in ES 8.5, Splunk AI Assistant v2, and More from Splunk ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

Break the Build: Inside the KubeDoom Lounge at .conf26

    You step up to the machine. The pixelated corridors of a certain 1993 FPS load in front of you, EMP Pulse ...

Splunk Auto Ingestion Parallel Pipeline Scaling

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...