Hello,
Since the update to 1.0.8 today (01/02) the Splunk DB Connect stopped indexing data in Splunk.
Splunk show my sources as updated today:
But when I query data 4 hours ago, no results are found:
In DB Connect log there are no errors.
I recreated the connections Connect the DB, but had no effect.
Has anyone had this problem?
Thank you in advance for any help.
Have you set up line-breaking rules in props.conf for you custom sourcetypes? The last section on this page might help with that: http://docs.splunk.com/Documentation/DBX/latest/DeployDBX/Configuredatabasemonitoring
No, I don't set up any configuration in props.conf. I'm making new Database Inputs (new source type too) and it's working now. Thank you for the answer.