All Apps and Add-ons

Passing a date to dbquery

obrienk
Explorer

Hi,
I would like to run a simple query against a database using splunk.
I would like to run the query as part of a dashboard.

The query is as follows:

| dbquery "DATEBASE_NAME" limit=1000 "select tr.* from schema.table tr where tr.date = '27-AUG-2014'

I would like the query to run against the date in question. So it would be like:

| dbquery "DATEBASE_NAME" limit=1000 "select tr.* from schema.table tr where tr.date = sysdate

I am having trouble defining the date as the dbquery needs to be the first item on the search line.

Can anyone help?
Thanks,

Tags (1)
0 Karma
1 Solution

obrienk
Explorer

I got this working by using the date in the database

ie. tr.date = to_date(current_date)

View solution in original post

0 Karma

obrienk
Explorer

I got this working by using the date in the database

ie. tr.date = to_date(current_date)

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...