topic Help to convert sql query to splunk query in All Apps and Add-ons

Help to convert sql query to splunk query

sahil237888 — Wed, 30 Sep 2020 01:52:49 GMT

Hi Experts,

Can anyone help me in converting below sql query to splunk query.I really dont have any clue for percentile_cont thing.

SELECT class_id,round(avg(percent/100,2) as percentage,
round(percentile_cont(0.05) within group (order by percent/100),3) as AmarksPerntl,
round(percentile_cont(0.09) within group (order by percent/100),3) as BmarksPerntl
from myTable group by class_id
order by 2 desc

Re: Help to convert sql query to splunk query

Sukisen1981 — Fri, 23 Aug 2019 18:21:23 GMT

nah won't do 🙂 🙂
is it not possible for you to just post a sample of your events and fields and then tell us your expected splunk output?
that way it will be easier for us to come up with a query that fits your needs...

Re: Help to convert sql query to splunk query

richgalloway — Fri, 23 Aug 2019 19:12:16 GMT

You should find some helpful information at http://www.innovato.com/splunk/SQLSplunk.html .

Re: Help to convert sql query to splunk query

sahil237888 — Sat, 24 Aug 2019 01:58:27 GMT

@richgalloway, this URL is not working,Not found error while browsing this URL.

Re: Help to convert sql query to splunk query

niketn — Sat, 24 Aug 2019 03:46:21 GMT

@sahil237888 there was an extra dot at the end of the URL because of which it was not working. However, similar document you can also find in the Splunk Documentation link:

https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/SQLtoSplunk

Re: Help to convert sql query to splunk query

richgalloway — Sat, 24 Aug 2019 11:20:05 GMT

The link provided by @niketnilay is the one I was looking for, however, so try that.