Correct me if i am wrong.
Above python script is used to index data? and do we have to write script to connect to DB in Python?
Even I am new to python 😞
... View more
I have a database input configured:
source="dbmon-tail://Sample_DB/sample1"
i/p type: Tail
Rising column: modified_date
Index: default
O/p format: Multi line key value format
o/p timestamp : Un checked
Interval : auto
and placed below lines in 'props.conf' file at below path "Splunk/etc/apps/search/local/" and also in "Splunk/etc/apps/search/default/"
[sample1]
SHOULD_LINEMERGE = false
LINE_BREAKER = ([\r\n]---91827349873-dbx-end-of-event---[\r\n])
but still getting o/p as below format""
modified_date=2013-02-16 02:32:13
track=US
cause=Task
closed_date=2013/02/16
area=TC Request
---91827349873-dbx-end-of-event---
entry_id=1234
assigned_id=ABCD
status=Closed
and also unable to retrieve 'create_date' column which is existing in DB
... View more
I too have exactly same issue with Splunk. From last post i have one doubt.
"Assuming you already have a script or program that can get data from DB, the following code should be able to get you going".
Splunk will connect to MySql and keeps data in local. Then why again we need to write a script which retrives data from DB?
... View more