Hi! I am using the DB Connect app to successfully bring in a SQLite3 database. This database gets updated every 15 mins. How do I refresh the database and the searches every 15 mins too. Currently I am either deleting and readding the database or restarting splunk - which isn't ideal. Many thanks in advance! Chris
Hope the following will help:
Database input params
Input Type = Tail
Rising Column = dbField
Interval = 15000
They are in /splunk/etc/apps/dbx/local/inputs.conf
database.conf - contains database connections
Hope the following will help:
Database input params
Input Type = Tail
Rising Column = dbField
Interval = 15000
Ah, thanks! where is the database input params?
/splunk/etc/apps/dbx/local/database.conf?