Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About eugenezxq
eugenezxq
New Member
Member since:
06-29-2018
06-05-2020
Community Statistics
| Posts | 6 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 06-29-2018 |
Activity Feed
- Posted Why does the "tstats count" and "tstats values" generate a different event count? on Splunk Search. 12-02-2018 07:12 PM
- Tagged Why does the "tstats count" and "tstats values" generate a different event count? on Splunk Search. 12-02-2018 07:12 PM
- Tagged Why does the "tstats count" and "tstats values" generate a different event count? on Splunk Search. 12-02-2018 07:12 PM
- Posted Re: universal forwarder bug after update to V6 on Getting Data In. 09-20-2018 08:39 PM
- Posted Re: Why is Splunk dbconnect v3 batch input unable to fully ingest all the rows from MSSQL? on All Apps and Add-ons. 07-02-2018 08:25 PM
- Posted Re: Why is Splunk dbconnect v3 batch input unable to fully ingest all the rows from MSSQL? on All Apps and Add-ons. 07-01-2018 07:22 PM
- Posted Re: Why is Splunk dbconnect v3 batch input unable to fully ingest all the rows from MSSQL? on All Apps and Add-ons. 06-30-2018 06:27 PM
- Posted Why is Splunk dbconnect v3 batch input unable to fully ingest all the rows from MSSQL? on All Apps and Add-ons. 06-29-2018 12:23 AM
- Tagged Why is Splunk dbconnect v3 batch input unable to fully ingest all the rows from MSSQL? on All Apps and Add-ons. 06-29-2018 12:23 AM
- Tagged Why is Splunk dbconnect v3 batch input unable to fully ingest all the rows from MSSQL? on All Apps and Add-ons. 06-29-2018 12:23 AM
Topics I've Started
12-02-2018
07:12 PM
I have 2 queries:
|tstats values(sth.sth) as sth... |stats count by sth | ...
and
|tstats count from datamodel=sth ... | stats count by sth |...
both give me a different event count. Just want to know why that is the case.
... View more
09-20-2018
08:39 PM
Hi did you guys manage to resolve this issue? Am getting this right now.
... View more
07-02-2018
08:25 PM
I am also seeing:
[QuartzScheduler_Worker-1] INFO org.easybatch.core.job.BatchJob - Batch size: 1,000
in splunk_app_db_connect_server.log. Not sure if this is the cause.
... View more
07-01-2018
07:22 PM
tz are you suggesting the format for the timestamp? Hmmm shouldn't all be the same since they are queried from the same database? sorry am quite noob at this.
... View more
06-30-2018
06:27 PM
rows generated is 29523byr MSSQL which should be much lower than the 150000 limit. the number of rows ingested by splunk is just 6477.
... View more
06-29-2018
12:23 AM
Am working on a project and realise that the dbconnect app (with batch input setting), is unable to fully ingest all the results queried on MSSQL. The difference in the row generated on MSSQL is so much more than what is ingested. the setting for my db_input.conf is as below:
[myQuery]
host = sampleHost
connection = connectionName
disabled = 0
index = database
index_time_mode = current
interval = 36 * * * *
mode = batch
query = myQuery
source = dbx
sourcetype = sql_db
fetch_size = 150000
query_timeout = 1800
max_row = 150000
tail_rising_column_number = 1
input_timestamp_column_number = 8
Thanks in advance guys!
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
