I can find my DBConnect input inside the "/app/splunk/var/log/splunk/splunk_app_db_connect_job_metrics.log" log.  It pretty much runs a "Select * from a table" every 4 hours and sends the results to an index.  It always runs to completion with a "status=COMPLETED" but at times it finishes with an 'error_count > 0' and we notice that we don't get those log events added to the index for that run.  Where can I see that these errors are and why are they generated? ... View more