Hi, I have the same issue on my instance, below my scenario:
I have a Splunk cloud (current version 7.2.6) signed for my company.
Installed a Splunk Enterprise (same versión as cloud) and enabled Search Head.
on my Search Head, I installed dbconnect 3.2 and setup the environment with the java version that splunk Recomends (version 4.2).
Setup everything (connection, login for a MS Sql) and I can use output feature except if I try to use the upsert option.
Without the upsert option, Splunk send data to my DB, but if I setup a primary key on my DB and enable the upsert option, then return a error that said 'uniqueKey not found in mappings'.
I have read everything that I found, can anyone give me a hand with this?
Best regards.
... View more