Column names with Oracle and DB Connect

[girtsgr]

I have a DB Connect input: SELECT EVENT_ID, EVENT_TYPE, ... FROM table WHERE EVENT_ID > ? ORDER BY EVENT_ID ASC.
The fields in the result all come with a column name, eg:
EVENT_ID="225894621", EVENT_TYPE="QUERY_BILLS",...
EVENT_ID="225894620", EVENT_TYPE="CONN_SERVICE",... etc.

It seems to me that it's an unnecessary overhead. Can I get rid of the column names?

[tiagofbmm · Accepted solution]

No, DBConnect method of collection is to create a KV pair out of each field, no way around that

[girtsgr]

Too bad. What's the best way to get usefull fields out of the results - use field extraction or something else?

[tiagofbmm]

Assign the events to a sourcetype which has KV_MODE=auto to get the fields and values automatically extracted. If not, use REGEX to get them on the sourcetype level too

[girtsgr]

Great, will do that, thank you!