Splunk Search

"DB CONNECT" app timestamp is not working

changwoo
Communicator

i am using the db connect app to get the data from my db.
i have a date formate like 2005-05-30

and my input.conf is alt text

and the error log is like this alt text

plz help~

1 Solution

mchang_splunk
Splunk Employee
Splunk Employee

Please try to increase MAX_DAYS_AGO in props.conf.
Here is the answer you can refer to:
http://answers.splunk.com/answers/24668/how-do-you-limit-the-amount-of-time-that-splunk-looks-into-t...

View solution in original post

mchang_splunk
Splunk Employee
Splunk Employee

Please try to increase MAX_DAYS_AGO in props.conf.
Here is the answer you can refer to:
http://answers.splunk.com/answers/24668/how-do-you-limit-the-amount-of-time-that-splunk-looks-into-t...

Get Updates on the Splunk Community!

Community Content Calendar, November Edition

Welcome to the November edition of our Community Spotlight! Each month, we dive into the Splunk Community to ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...