All Apps and Add-ons

Unable to configure an input on Splunk DB Connect 3.1.1 version using rising column input type.

bsriramineni_sp
Splunk Employee
Splunk Employee

I want to configure a db input to fetch data from MS-SQL server database. I want to use rising column input type. However, when I configure the input I am getting the below error

com.microsoft.sqlserver.jdbc.SQLServerException: The index 1 is out of range.

No results found.

Below is my SQL query:

SELECT * FROM "msdb" ."dbo"."MSdbms"
WHERE dbms_id > 2
ORDER BY dbms_id ASC

I am using db connect 3.1.1 app and MS-SQL Server using MS Generic Driver.

0 Karma
1 Solution

bsriramineni_sp
Splunk Employee
Splunk Employee

Solution:
Modify the query as below:

SELECT * FROM "msdb" ."dbo"."MSdbms"
WHERE dbms_id > ?
ORDER BY dbms_id ASC

Explanation:

You need to update the SQL query that includes a "?" symbol and order by clause for the checkpoint value. The question mark (?) as the checkpoint placeholder and an order by clause. Every time the input is run, DB Connect replaces the question mark with the latest checkpoint value .

Refer the below link:

https://docs.splunk.com/Documentation/DBX/3.1.1/DeployDBX/Createandmanagedatabaseinputs#Choose_input...

View solution in original post

bsriramineni_sp
Splunk Employee
Splunk Employee

Solution:
Modify the query as below:

SELECT * FROM "msdb" ."dbo"."MSdbms"
WHERE dbms_id > ?
ORDER BY dbms_id ASC

Explanation:

You need to update the SQL query that includes a "?" symbol and order by clause for the checkpoint value. The question mark (?) as the checkpoint placeholder and an order by clause. Every time the input is run, DB Connect replaces the question mark with the latest checkpoint value .

Refer the below link:

https://docs.splunk.com/Documentation/DBX/3.1.1/DeployDBX/Createandmanagedatabaseinputs#Choose_input...

Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...