Splunk Search

DBConnect fetch not to consider latest value of rising column

pradeepkumarg
Influencer

The rising column I'm using is a time stamp and at times there are many records with the same value and if the fetch happens in the middle of those records, DBConnect is missing the rest of the records coming with the same value.

How can I limit the fetch not to consider the latest value so that all of them are fetched in the next run.

Example rising column value - dateUpdated - 2014-08-05 13:39:00.0

0 Karma
1 Solution

pradeepkumarg
Influencer

pradeepkumarg
Influencer

I found the answer mentioned in the below thread solves the purpose

http://answers.splunk.com/answers/68699/database-table-doesnt-have-rising-column-totally

Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...