I am not sure what is causing this behavior.
My table has 2369 rows.
I found this by using Splunk DB Connect Database Query with the following query:
SELECT SQL_CALC_FOUND_NUM_ROWS 1 FROM myTable
If I actually start to return row data in my query the number of rows returned starts to reduce for example.
SELECT * FROM myTable
Returns 1018 rows and
SELECT * FROM myTable where id > 900
Returns 180 rows.
So I have ruled out that it is a hard limit on my number of rows.
I suspected there was a setting in java.conf
$SPLUNK_ROOT/etc/apps/dbx/local/java.conf
That is limiting my query size. I have been through the "OMG so many settings" trying to identify those limiting query size and increased everything by an order of magnitude. This has been purely trial and error and has had zero effect. I ended up reinstalling Splunk and dbconnect from scratch, incase my actions had caused it. No effect.
If someone could explain what components are used by Splunk and DB connect to execute a MySQL query this would help give me other avenues to target. I.E.:
java.framework is used for XXX, MySQL_java_driver is used for XXX, etc, etc
Any help in lifting this limit would be greatly appreciated.
... View more