- Splunk Answers
- :
- Using Splunk
- :
- Splunk Search
- :
- DB Connect not resolving MySQL Table column names
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have connected to a MySQL Table which has 10 columns using DB Connect. It gets the data in search. But in the search, it doesn't show as columns in "Table" view.I can see all the fields as comma separated in Raw and List format. What to do for this ?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Finally got it fixed . I used Key Value as the source type than CSV. Now it is perfectly resolving the columns without any additional configuration changes 🙂
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Finally got it fixed . I used Key Value as the source type than CSV. Now it is perfectly resolving the columns without any additional configuration changes 🙂
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Also, When I do DB Queries, it is properly showing as columns. But I don't want to run queries every time and it could affect the DB performance as it tries to run complex queries
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
It is showing data. But all the columns are clubbed together and showing in one column. If I load a CSV file, and view in table mode, it resolves the column names and shows like a neat table. But that is not happening when I connect the DB directly
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I'm not sure I quite understand. Do you mean that when you look at the results in the search view "table" mode, nothing shows up? If so, can you try adding " | table *" to the end of your search?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Add the fields as selected fields and they should then show up in the table view.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
the fields are not showing up for selection. that is the issue
Detecting Remote Code Executions With the Splunk Threat Research Team
Enter the Splunk Community Dashboard Challenge for Your Chance to Win!
.conf24 | Session Scheduler is Live!!
