I am using Splunk DB Connect and most rows are being populated correctly. I do have some rows that are not getting data for all the columns. When I look at the source DB using either SQL Management Studio or the DB Connect app, I do see that all the columns are populated, but when I look at the indexed data on Splunk, I see that after a description column, that the rest of the columns are not getting put into the index. This is only for some records. One thing I noticed on one of the broken records is that after the 50th character in the description column, the rest of the text in the description column isn't showing up in the index. There are also some carriage returns after the 50th character but there are a few characters before the carriage returns that aren't showing up. When I look at the Database info, the description column shows is a varchar(255) column.
What can I do to troubleshoot why it stops indexing the row while it's loading the description column?
... View more