Splunk Enterprise

How to Query Database information from DB Connect?

Zer0sss
Loves-to-Learn Lots

I am wanting to query DB information from DB Connect.
But the problem is that each time the query gets information of the entire query table. This takes up a lot of storage space
Is there a way to get only new logs without duplicates?
Every day the amount of new information is different, can't limit the number of rows you want to get?

Thanks

Labels (1)
Tags (1)
0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...