Splunk Search

"DB CONNECT" app timestamp is not working

changwoo
Communicator

i am using the db connect app to get the data from my db.
i have a date formate like 2005-05-30

and my input.conf is alt text

and the error log is like this alt text

plz help~

1 Solution

mchang_splunk
Splunk Employee
Splunk Employee

Please try to increase MAX_DAYS_AGO in props.conf.
Here is the answer you can refer to:
http://answers.splunk.com/answers/24668/how-do-you-limit-the-amount-of-time-that-splunk-looks-into-t...

View solution in original post

mchang_splunk
Splunk Employee
Splunk Employee

Please try to increase MAX_DAYS_AGO in props.conf.
Here is the answer you can refer to:
http://answers.splunk.com/answers/24668/how-do-you-limit-the-amount-of-time-that-splunk-looks-into-t...

Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...