Hi all.
I'm using splunk 9.0.2 and db connect 3.11.1.
Sometimes my connection from db connect to my database fails. so I'm wondering if is it possible to automatic retry the missed query or not?
My query is depend on time to retrive last 5 min entry rows. so the missed query caused data loss.
My query:
SELECT * FROM DB.MY_TABLE1 WHERE insert_date >= SYSDATE - INTERVAL 5 MINUTE
Splunk inputs do not retry when they encounter an error. The only way I can think of to do that would be to use a scripted or modular input to read the database. The script could be written to retry on connection failure (or any other error). Be aware that this means you would lose the Rising Column feature of DB Connect so your script would have to replicate the feature somehow.