I can find my DBConnect input inside the "/app/splunk/var/log/splunk/splunk_app_db_connect_job_metrics.log" log. It pretty much runs a "Select * from a table" every 4 hours and sends the results to an index. It always runs to completion with a "status=COMPLETED" but at times it finishes with an 'error_count > 0' and we notice that we don't get those log events added to the index for that run. Where can I see that these errors are and why are they generated?
... View more