Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Splunk DB Connect 2: How to get one search as input to another search in the same dbxquery?

$
0
0
All my data for this query is using DBX and one table. I have to select Field A from DBname where Field B=open connection information Then I need to match the Field A for the following (I only want the Field A values that appear from this query to run against): select Field A, Field C from DBname where Field B=closed AND Field D > timevalue Then I am just going to count by Field A Field B for some trending views Essentially, I am looking at hosts with open tickets, then wanting to trend past outages for only those currently open hosts. These both work independently. I've tried subsearch, writing one of them to a lookup, but I'm just not skilled enough yet to figure out how to evaluate the two against each other. I'd appreciate any suggestions. Thanks

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>