在Database Query中,搜索语句如果包含汉字,则会报错:Error in 'script': Getinfo probe failed for external search command 'dbquery'
搜索语句如下:
select substr(va.CZ,1,10) as time,count(*) as num,count(distinct yh) from LOG va
where va.CZ >= '2013-07-01' and va.CZ <= '2013-07-19' and va.mc = '平台'
group by substr(va.CZ,1,10)
order by substr(va.CZ,1,10) asc
When Chinese post to splunkweb, it use GB2312 encode. it should decode to unicode then encode utf-8
please modify the sendEncoded function in bridge.py
def sendEncoded(self, type, data):
if isinstance(data, unicode):
enc = unicode(data).encode('utf-8')
else:
enc = data.decode('gb2312').encode('utf-8')
header = struct.pack('>ci', type, len(enc))
self.socket.send(header)
self.socket.send(enc)
This method is not fit for other language encode.
I met the same problem
Splunk 5.0.7 for win2003 sp2 X86(jdk1.7.0_25),DB Connect 1.1.3,oracle
select * from def_ia_user where sta_condition='20131027' and NAME='陈飞'
Getinfo probe failed for external search command 'dbquery'
where are you running this query?