Splunk Enterprise

How to run this type of queries in splunk

uma2356
Engager

Hi,

I'm having this type of queries, how can i run this in splunk:

SELECT FROM (SELECT rval.,ROWNUM as rn FROM(
select count(*) as count,count(1) over() as tcount, Xipm as location from documentreporting where xidcprofile='IpmApp_1' and XIPM_APP_1_9 is not null group by XIPM_APP_1_9 
rval )WHERE rn >=1 AND rn <= 100
Tags (1)
0 Karma

woodcock
Esteemed Legend

First install DB Connect V3: https://splunkbase.splunk.com/app/2686/
Then run a search like this:

| dbxquery shortnames=t "SELECT * FROM (SELECT rval.*,ROWNUM as rn FROM(select count(*)  as count,count(1) over() as tcount, Xipm  as location  from documentreporting  where xidcprofile='IpmApp_1' and XIPM_APP_1_9 is not null group by XIPM_APP_1_9 rval )WHERE rn >=1 AND rn <= 100"
0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...