Hello. Splunk version - 8.2.2 Splunk DB connect version - 3.6.0. After update Splunk Enterprise version  from 8.0.2 to 8.2.2. i have noticed problem with timezone for Oracle database sources. My timezone is Europe/Kiev (GMT +3). I set timezone in DB connection settings, also i have tried to set timezone at Java settings (-Duser.timezone=Europe/Kiev) but each time a have the same result. So. I created DB connection with this select: SELECT CAST(EXTENDED_TIMESTAMP AS TIMESTAMP) EXTENDED_TIMESTAMP, AUDIT_TYPE, STATEMENT_TYPE, RETURNCODE FROM SYS.DBA_COMMON_AUDIT_TRAIL WHERE EXTENDED_TIMESTAMP > ? ORDER BY EXTENDED_TIMESTAMP Rising column - EXTENDED_TIMESTAMP Time column - EXTENDED_TIMESTAMP.     ... View more

Hello. I have two tables. I need to compare the values of two columns in each table. In result, I want to receive rows from the first table only with fields, which faced in the second table. Table 1 v11 v12 v13 v14 v21 v22 v23 v24 v31 v32 v33 v34 v41 v42 v43 v44 Table 2 v21 v22 v31 v32 As a result, I need to receive only two strings №2 and №3 from the first table. I can't use subsearch because in the second table more than 2 million strings... And I need to start this search every minute. Have you any ideas? Thanks in advance. ... View more