Hi everybody.. here deploy and sprint_timeline are two differerent tables.can you please tell splunk query for this sql query. especially for this inner join operation.

[Madhan45]

select * from (select SPRINT_TIMELINE.SPRINT,deploy.ENV_NAME,SUBSTR(deploy.COMPONENT_ID,1,LENGTH(COMPONENT_ID) - INSTR(REVERSE(COMPONENT_ID),'.',1,4)),count( distinct deploy.DEPLOYMENT_TIME) as count from SPRINT_TIMELINE inner join deploy on deploy.DEPLOYMENT_TIME between SPRINT_TIMELINE.START_DATE AND SPRINT_TIMELINE.END_DATE WHERE deploy.ENV_NAME='DIT2' and deploy.CSI_ID='160034' group by SPRINT_TIMELINE.SPRINT,deploy.ENV_NAME,deploy.COMPONENT_ID order by 4 desc) where rownum < 16

[Madhan45]

yes i read. here is no common field between two tables(deploy and sprint_timeline).then how can we perform a inner join operation based on the given condition.

[richgalloway]

Have you read Splunk for SQL users?