I am scheduling this at 9.00 AM everyday using splunk DB connect .When i see the sourcetype nextday at 9.00 AM getting doubled up data ( like 700 rows 350 + 350 )..
Can some one help me to resolve this issue .I need to have next days data got refreshed after 9.00 AM without doubling up .
i figured out. Thanks a lot
Modify your search so that it is only pulling one day's worth of data instead of two.
i have set it for last 24 hours only. is this what you meant?