Hello Bruno, thank you very much for your answer. Yes, you assumed well, I am trying to connect to an Oracle database. I have limited access to the database, I cannot create views, index, and so on but I liked the option 2, I'm going to investigate about "function based index", maybe the DBA can do it for me. I am also contemplating the option to do my own script to extract those data from the database, I had many problems with dbconnect (Version 1 and 2) like using DATE and VARCHAR fields for rising column and I do not have enough time. Thanks a lot for your response it helped me a lot. ... View more

Your answer was spot on. We had enableSplunkdSSL set to false in $SPLUNK_HOME/etc/system/local/server.conf for this Splunk installation. Thank you. ... View more

Can you tell us all of the lookup's properties? You may be creating arguments but not putting them in your SQL query ... View more