Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

DB Connect Temporal Lookup - does it exist?

$
0
0
Hi. I am trying to figure out how to put together a time based lookup based using the DBX conduit, connected to a radius session table. Radius table has start/stop times and IP. Original event table has IP and event time. It feels like I need to do something like this: **Lookup SQL**: SELECT * from `radius`.`radiusacct` WHERE acctstarttime < @eventTime AND (@eventTime > acctstoptime OR acctstoptime IS NULL) **Field Mapping**: Event IP --> Radius IP But I don't think I am able to call out things like @eventTime in the SQL Query, am I? Any ideas on how to accomplish? Thanks Dave

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>