All Apps and Add-ons

DB Connect Lookup failing, sending NULL to SQL server

arrowecssupport
Communicator

I am using DB connect AddOnn 3.1.3 and my results are not being enriched.
When setting up the DB Connect Lookup wizard,

the "Set Reference Search" returns the suitable fields from the Splunk index
the "Set Lookup SQL" returns the requested fields from the DB
I set up the field mapping by selecting all the right fields.

But when i run the "Preview Results" it does not enrich the data.
I've then done a packet capture and extracted the SQL query being sent to the SQL server and the last line is as follows below.

dbxlookup WHERE "serial" IN (null)

So I'm looking up a serial number, and the value should be from the Splunk search.

"serial" AS "SERIAL_NUM"

^^ So this should copy the value of SERIAL_NUM to serial and then be used in the SQL string to the server. But it's sending null by mistake.

marcoscala
Builder

hI!

Any news about this problem? I've the same issue with a Customer with mySQL and DBX 3.4.2.

 

Regards,

Marco

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...