About karabsze

karabsze · ‎05-07-2015

Thanks rich. Yes, I am just using the dbx as a modular input. That is good to hear that the impact is negligible in the view of DBX stuff. Do you know if DBX setup might decrease the stability on the indexers? Moreover, I agreed that using dbquery directly would increase the difficulty to control the loading to db. :

karabsze · ‎05-06-2015

Hi all, We are going to use DB Connect 1 to get data from Database. And we would like to setup the dbx on the indexer instead on search head. Is there any other possible impact if we have no usage on reporting or database lookups? Many THanks! Best Regards, Karab

karabsze · ‎04-27-2015

We meet the same issue too. Checked in the search log, it seems that the field with space are failed to be substitute. Anyone has idea about that?

karabsze · ‎04-15-2015

Hi fdi, Thanks for you reply. I know about the thin style but I am not sure how I can setup it in DBConnect V2 In the db_connections.conf [TEST_CONNECTION] connection_type = oracle database = test.services host = host.com identity = test_user port = 1521 readonly = 1 The connection string is generated by above configuration and the ":" inside jdbc:oracle:thin:@{host}:1521*:*{service_name} cannot be skipped....i have no way to construct the string like below format jdbc:oracle:thin:@//oracle.hostserver2.mydomain.ca:1522/ABCD or [jdbc:oracle:thin:@//{your_host}:1521/{your_service_name}]

karabsze · ‎04-14-2015

I am trying to connect the oracle db with the service name, but the following warning pops up: Validating connection with URL [jdbc:oracle:thin:@{host}:1521:{service_name}] failed, please verify that the connection is configured correctly. May you advise what is the right configuration for using Service name instead of SID? Thanks

karabsze · ‎03-27-2015

Finally, we setup like that to search itself too. [distributedSearch:A] default = false servers = machineA:8089 [distributedSearch:B] default = true servers =localhost:localhost [distributedSearch] servers = machineA:8089, localhost:localhost

karabsze · ‎03-26-2015

Have you also tried to change the interval to cron expression ?

karabsze · ‎03-26-2015

Seems there is a solution in version 6.2 http://docs.splunk.com/Documentation/Splunk/latest/DistSearch/Distributedsearchgroups

karabsze · ‎02-13-2015

Is it possible to set the default distributed search group to nothing but only search within itself (as my search head is also the indexer)? If i set the distsearch.conf as below, the search request did not really execute on itself. [distributedSearch:A] default = false servers = machineA:8089 [distributedSearch:B] default = true servers = [distributedSearch] servers = machineA:8089

karabsze · ‎02-13-2015

Thanks all! When distributed to the search peer, how do the results send out? via knowledge bundle?

karabsze · ‎02-04-2015

Per my knowledge, the subsearch result would be acted as parameter to the main search. In the distributed search, would the subsearch result first be consolidated in the search head and then further distributed to the search peer? Thanks!

karabsze · ‎02-02-2015

So what major functionality it actually affected? Basically, my major usage would be "Database Inputs". Thanks for your prompt response!

karabsze · ‎02-02-2015

i.e. is Splunk DB Connect classified as Premium apps?

Posts	13
Solutions	1
Karma Given	5
Karma Received	5
Member Since	‎02-02-2015

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

Install DB Connect1 on indexer

DB Connect 2: How to configure a connection to an ...

Is it possible to set the default distributed sear...

How do subsearch work in distributed search?

Can Splunk Free used Splunk DB Connect?

Re: Install DB Connect1 on indexer

Install DB Connect1 on indexer

Re: How can I use a combination of map and sendema...

Re: DB Connect 2: How to configure a connection to...

DB Connect 2: How to configure a connection to an ...

Re: Is it possible to set the default distributed ...

Re: Splunk DB Connect: Why did my dbmon-tail input...

Re: Distributed Search across multiple "separate" ...

Is it possible to set the default distributed sear...

Re: How do subsearch work in distributed search?

How do subsearch work in distributed search?

Re: Can Splunk Free used Splunk DB Connect?

Can Splunk Free used Splunk DB Connect?