Hi all,
I would like to import the create_date as timestamp from a database. When I select my epoch value in the Splunk DB Connect 2 app and run the import, nothing gets imported and I get a error. Am I doing something wrong? Hope someone can help 🙂
I am using version: 2.0.6 of Splunk DB Connect and version 6.3 of Splunk.
SQL output:
create_time id
1 1210326957 3
error log:
10/21/2015 16:13:25 [ERROR] [ws.py] [DBInput Service] ERROR: The datatype of output timestamp column number [1] is invalid as [BIGINT]..
10/21/2015 16:13:25 [ERROR] [websocket.py] ERROR: The datatype of output timestamp column number [1] is invalid as [BIGINT]..
10/21/2015 16:14:20 [ERROR] [ws.py] [DBInput Service] ERROR: The datatype of output timestamp column number [1] is invalid as [BIGINT]..
10/21/2015 16:14:20 [ERROR] [websocket.py] ERROR: The datatype of output timestamp column number [1] is invalid as [BIGINT]..
10/21/2015 16:15:21 [ERROR] [ws.py] [DBInput Service] ERROR: The datatype of output timestamp column number [1] is invalid as [BIGINT]..
10/21/2015 16:15:21 [ERROR] [websocket.py] ERROR: The datatype of output timestamp column number [1] is invalid as [BIGINT]..
config:
[mi_input://test]
connection = otrs_db
index = main
input_timestamp_column_name = create_time
input_timestamp_column_number = 1
interval = 60
max_rows = 100
mode = batch
output_timestamp_format = YYYY-MM-dd HH:mm:ss
query = select TIMESTAMP( ticket_history.create_time ) create_time,\
ticket_history.id as id\
from ticket_history;
source = test
sourcetype = test
ui_query_mode = advanced
ui_query_schema = NULL
ui_query_table = NULL
... View more