Reloading Index everytime

praveenm00 · ‎01-30-2019

Hello Experts,

We are having an issue where we have an DB connect to connect to oracle database and getting the data from a table.

The schedule which we had configured is 5 mins and we have configured as a batch input.

We have an requirement that whenever we are getting the data from database we have to delete or replace the old data with new data. how can we achieve it. Kindly suggest.

vishaltaneja070 · ‎01-30-2019

Hello praveenm00

the best way to do is, to use Lookup in Splunk. load the data into lookup and outlookup when there is a refresh.

Reloading Index everytime

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Recap | Agentic Operations Start with Context: Build the Right Data Foundation

Recap | Assisted, Augmented or Agentic? Choose Your Splunk Starting Point

Session 2 | Beyond the Thread: Operationalizing AI with Confidence

Join the Conversation

Reloading Index everytime

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Recap | Agentic Operations Start with Context: Build the Right Data Foundation

Recap | Assisted, Augmented or Agentic? Choose Your Splunk Starting Point

Session 2 | Beyond the Thread: Operationalizing AI with Confidence