Hi All,
Is there any way of preventing DB Connect 2 renaming the columns when you query data via a DBXquery command?
eg, a column in a table could be called "Loaded", but when querying, it gets renamed to "(007) UX_CCC_HAT_Status.Loaded.datetime".
Is there any way of keeping it as "Loaded" when Splunk ingests it?
I have four tables I need to ingest. They all have upwards of 40 columns each, and I'd rather not have to do a lengthy rename operation on them all.
Thanks in advance
Gib
shortnames=1 did the trick for me 🙂
use props.conf and transforms.conf files to do it.
this link can help you to do
http://docs.splunk.com/Documentation/Splunk/latest/Admin/Propsconf?utm_source=answers&utm_medium=in-...
http://docs.splunk.com/Documentation/Splunk/latest/Admin/Transformsconf?utm_source=answers&utm_mediu...
or use rename
command