Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

Data input sql - latest indexed time

$
0
0

I created a data input from Manager. The input is a sql query that retrieves data from database. The refresh type is full dump and happens every hour. The dump retrieves around 250+ rows (the count will vary at every refresh).The frequency is not exactly important. The most important thing is the last run (event).

What i want - i want to get the most recent event (set of records).

for e.g. I get 210 rows at 1 pm and then 250 at 2 pm. I want to get the most recently indexed event, that is 250 rows that were generated at 2pm. thanks, Rahul


Viewing all articles
Browse latest Browse all 13053

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>