All Apps and Add-ons

Unable to configure an input on Splunk DB Connect 3.1.1 version using rising column input type.

bsriramineni_sp
Splunk Employee
Splunk Employee

I want to configure a db input to fetch data from MS-SQL server database. I want to use rising column input type. However, when I configure the input I am getting the below error

com.microsoft.sqlserver.jdbc.SQLServerException: The index 1 is out of range.

No results found.

Below is my SQL query:

SELECT * FROM "msdb" ."dbo"."MSdbms"
WHERE dbms_id > 2
ORDER BY dbms_id ASC

I am using db connect 3.1.1 app and MS-SQL Server using MS Generic Driver.

0 Karma
1 Solution

bsriramineni_sp
Splunk Employee
Splunk Employee

Solution:
Modify the query as below:

SELECT * FROM "msdb" ."dbo"."MSdbms"
WHERE dbms_id > ?
ORDER BY dbms_id ASC

Explanation:

You need to update the SQL query that includes a "?" symbol and order by clause for the checkpoint value. The question mark (?) as the checkpoint placeholder and an order by clause. Every time the input is run, DB Connect replaces the question mark with the latest checkpoint value .

Refer the below link:

https://docs.splunk.com/Documentation/DBX/3.1.1/DeployDBX/Createandmanagedatabaseinputs#Choose_input...

View solution in original post

bsriramineni_sp
Splunk Employee
Splunk Employee

Solution:
Modify the query as below:

SELECT * FROM "msdb" ."dbo"."MSdbms"
WHERE dbms_id > ?
ORDER BY dbms_id ASC

Explanation:

You need to update the SQL query that includes a "?" symbol and order by clause for the checkpoint value. The question mark (?) as the checkpoint placeholder and an order by clause. Every time the input is run, DB Connect replaces the question mark with the latest checkpoint value .

Refer the below link:

https://docs.splunk.com/Documentation/DBX/3.1.1/DeployDBX/Createandmanagedatabaseinputs#Choose_input...

View solution in original post

.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!