Splunk Search

How do I solve adding data inputs into DB Connect?

napoleon_bing
New Member

I have successfully made an identity and connection. And have successfully validated that I am able to connect. ATM I am now attempting to add in a data input, however when I execute the query in Advanced mode, the "continue" button continues to be grayed out. In addition when I attempt to execute the query in simple mode the table drop down menu is populated with the tables within my DB, but can still not execute the query. My question then becomes what have I done wrong, or what am I missing in order to make this work? I have made this in a docker located at nvisibl3/splunk-java.

Tags (1)
0 Karma

vasanthmss
Motivator

Once the connectivity is succeeded there should not be any issues. Since you are facing the issue while advance mode, I guess you may not used the data base name. as a best practice try with the below sample,

select * from schema.database.table/view; 

Check with the below link,

http://docs.splunk.com/Documentation/AddOns/released/Oracle/ConfigureSplunkDBConnectinputsv2

Hope this will helps you

V

napoleon_bing
New Member

I tried the query you suggested, however I am still unable to return any results.

0 Karma

vasanthmss
Motivator

Could you explain bit more.with sample query. And where you are searching...

V
0 Karma

napoleon_bing
New Member

Sure. I am trying to grab the IP and hostname information from a JSS database. The query I am attempting to run is '''SELECT computer_name, last_ip, last_reported_ip FROM computers;'''

0 Karma

davebrooking
Contributor

What troubleshooting have you performed? Do any meaningful diagnostics appear in the logs mentioned in the troubleshooting guide? If not, I'd also change the logging level as described in the documentation and re-examine the logs.

Dave

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...