Hello,
I have set up a heavy forwarder with DBX. The connection to my sample database (mySQL) works, but the data is not forwarded to my indexer.
I tested the connection by forwarding the syslog from the machine to my indexer, this worked fine.
I read SPLUNK answers up and down but cannot find the solution to my problem.
According to other answers, it should be enough to have setup outputs.conf correctly, which I think I proved by forwarding syslog.
I searched metrics.log to find any hint of forwarding my data, but did not find any (searched for "test" which is the index the data should be stored in)
db_inputs.conf:
[all_testtable]
batch_upload_size = 1000
connection = testconnect
disabled = 0
fetch_size = 300
index = test
index_time_mode = current
interval = 1200
max_rows = 0
max_single_checkpoint_file_size = 10485760
mode = rising
query = SELECT * FROM `testbase`.`testtable` where ID > ? order by ID
query_timeout = 30
sourcetype = Standard
tail_rising_column_number = 1
Splunk version (both forwarder and indexer) is 7.1.2
DB Connect Version is 3.1.3
Any help appreciated
↧