All Apps and Add-ons

splunk db connect error -- data truncation data too long for column

jingqin
New Member

my splunk db connect app version is 2.2.0.
my job is to find top 20 'uri'.
I saw the following error msg on dbx2.log:
error=ERROR: Data truncation: Data too long for column 'uri' at row 1.
How can I modify the limitation of truncation?

0 Karma

paulbannister
Communicator

Hi There,

In the associated props.conf for the particular sourcetype in question (db connect app and system) you should be able to set TRUNCATE=0 which will remove the truncation limit, this may have been answered in more detail in a previous question:

https://answers.splunk.com/answers/232604/dbconnect-events-truncate-despite-propsconf.html

It might also be worth updating to the latest version of DBConnect as there have been an array of performance improvements since 2.2

Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...

Observability | Use Synthetic Monitoring for Website Metadata Verification

If you are on Splunk Observability Cloud, you may already have Synthetic Monitoringin your observability ...

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...