<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Tokens in dbconnect 2 sql query?? in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Tokens-in-dbconnect-2-sql-query/m-p/242317#M15046</link>
    <description>&lt;P&gt;You can use this with dbxquery, and you probably want to use the &lt;CODE&gt;$token_name|u$&lt;/CODE&gt; form to urlescape your query:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;form&amp;gt;
  &amp;lt;label&amp;gt;Query_Builder&amp;lt;/label&amp;gt;
  &amp;lt;fieldset submitButton="true"&amp;gt;
    &amp;lt;input type="dropdown" token="connection"&amp;gt;
      &amp;lt;label&amp;gt;Connection&amp;lt;/label&amp;gt;
      &amp;lt;search&amp;gt;
        &amp;lt;query&amp;gt;| rest /servicesNS/-/-/db_connect/connections | table title&amp;lt;/query&amp;gt;
      &amp;lt;/search&amp;gt;
      &amp;lt;fieldForLabel&amp;gt;title&amp;lt;/fieldForLabel&amp;gt;
      &amp;lt;fieldForValue&amp;gt;title&amp;lt;/fieldForValue&amp;gt;
    &amp;lt;/input&amp;gt;
    &amp;lt;input type="radio" token="options"&amp;gt;
    &amp;lt;label&amp;gt; Options &amp;lt;/label&amp;gt;
    &amp;lt;choice value="shortnames=true"&amp;gt;Short field names &amp;lt;/choice&amp;gt;
        &amp;lt;choice value="shortnames=false"&amp;gt; Long field names &amp;lt;/choice&amp;gt;

    &amp;lt;/input&amp;gt;
    &amp;lt;input type="text" token="db_query"&amp;gt;
      &amp;lt;label&amp;gt;DB Query&amp;lt;/label&amp;gt;
    &amp;lt;/input&amp;gt;
    &amp;lt;input type="text" token="splunk_query"&amp;gt;
      &amp;lt;label&amp;gt;Splunk PostProcess Query&amp;lt;/label&amp;gt;
      &amp;lt;default&amp;gt;&amp;lt;/default&amp;gt;
    &amp;lt;/input&amp;gt;
  &amp;lt;/fieldset&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;event&amp;gt;
        &amp;lt;title&amp;gt;| dbxquery connection=$connection$ query=$db_query|u$ $options$| $splunk_query$ &amp;lt;/title&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;| dbxquery connection=$connection$ query=$db_query|u$ $options$ | $splunk_query$&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;0&amp;lt;/earliest&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="count"&amp;gt;10&amp;lt;/option&amp;gt;
        &amp;lt;option name="list.drilldown"&amp;gt;full&amp;lt;/option&amp;gt;
        &amp;lt;option name="list.wrap"&amp;gt;1&amp;lt;/option&amp;gt;
        &amp;lt;option name="maxLines"&amp;gt;5&amp;lt;/option&amp;gt;
        &amp;lt;option name="raw.drilldown"&amp;gt;full&amp;lt;/option&amp;gt;
        &amp;lt;option name="rowNumbers"&amp;gt;0&amp;lt;/option&amp;gt;
        &amp;lt;option name="table.drilldown"&amp;gt;all&amp;lt;/option&amp;gt;
        &amp;lt;option name="table.wrap"&amp;gt;1&amp;lt;/option&amp;gt;
        &amp;lt;option name="type"&amp;gt;list&amp;lt;/option&amp;gt;
        &amp;lt;fields&amp;gt;[]&amp;lt;/fields&amp;gt;
      &amp;lt;/event&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/form&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Mon, 25 Jan 2016 09:27:28 GMT</pubDate>
    <dc:creator>dart</dc:creator>
    <dc:date>2016-01-25T09:27:28Z</dc:date>
    <item>
      <title>Tokens in dbconnect 2 sql query??</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Tokens-in-dbconnect-2-sql-query/m-p/242316#M15045</link>
      <description>&lt;P&gt;Hi all, I'm wondering  if it possible  to tokenise parameters  within an sql query when using  dbconnect 2.&lt;/P&gt;

&lt;P&gt;eg - "SELECT * FROM "Permanent"."db"."Status" WHERE LoadDate=$datetoken$"&lt;BR /&gt;
OR&lt;BR /&gt;
"SELECT * FROM "Permanent"."db"."Status" WHERE $datetoken$" &lt;/P&gt;

&lt;P&gt;Thanks in advance.&lt;/P&gt;</description>
      <pubDate>Sat, 23 Jan 2016 03:59:31 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Tokens-in-dbconnect-2-sql-query/m-p/242316#M15045</guid>
      <dc:creator>mrgibbon</dc:creator>
      <dc:date>2016-01-23T03:59:31Z</dc:date>
    </item>
    <item>
      <title>Re: Tokens in dbconnect 2 sql query??</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Tokens-in-dbconnect-2-sql-query/m-p/242317#M15046</link>
      <description>&lt;P&gt;You can use this with dbxquery, and you probably want to use the &lt;CODE&gt;$token_name|u$&lt;/CODE&gt; form to urlescape your query:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;form&amp;gt;
  &amp;lt;label&amp;gt;Query_Builder&amp;lt;/label&amp;gt;
  &amp;lt;fieldset submitButton="true"&amp;gt;
    &amp;lt;input type="dropdown" token="connection"&amp;gt;
      &amp;lt;label&amp;gt;Connection&amp;lt;/label&amp;gt;
      &amp;lt;search&amp;gt;
        &amp;lt;query&amp;gt;| rest /servicesNS/-/-/db_connect/connections | table title&amp;lt;/query&amp;gt;
      &amp;lt;/search&amp;gt;
      &amp;lt;fieldForLabel&amp;gt;title&amp;lt;/fieldForLabel&amp;gt;
      &amp;lt;fieldForValue&amp;gt;title&amp;lt;/fieldForValue&amp;gt;
    &amp;lt;/input&amp;gt;
    &amp;lt;input type="radio" token="options"&amp;gt;
    &amp;lt;label&amp;gt; Options &amp;lt;/label&amp;gt;
    &amp;lt;choice value="shortnames=true"&amp;gt;Short field names &amp;lt;/choice&amp;gt;
        &amp;lt;choice value="shortnames=false"&amp;gt; Long field names &amp;lt;/choice&amp;gt;

    &amp;lt;/input&amp;gt;
    &amp;lt;input type="text" token="db_query"&amp;gt;
      &amp;lt;label&amp;gt;DB Query&amp;lt;/label&amp;gt;
    &amp;lt;/input&amp;gt;
    &amp;lt;input type="text" token="splunk_query"&amp;gt;
      &amp;lt;label&amp;gt;Splunk PostProcess Query&amp;lt;/label&amp;gt;
      &amp;lt;default&amp;gt;&amp;lt;/default&amp;gt;
    &amp;lt;/input&amp;gt;
  &amp;lt;/fieldset&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;event&amp;gt;
        &amp;lt;title&amp;gt;| dbxquery connection=$connection$ query=$db_query|u$ $options$| $splunk_query$ &amp;lt;/title&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;| dbxquery connection=$connection$ query=$db_query|u$ $options$ | $splunk_query$&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;0&amp;lt;/earliest&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="count"&amp;gt;10&amp;lt;/option&amp;gt;
        &amp;lt;option name="list.drilldown"&amp;gt;full&amp;lt;/option&amp;gt;
        &amp;lt;option name="list.wrap"&amp;gt;1&amp;lt;/option&amp;gt;
        &amp;lt;option name="maxLines"&amp;gt;5&amp;lt;/option&amp;gt;
        &amp;lt;option name="raw.drilldown"&amp;gt;full&amp;lt;/option&amp;gt;
        &amp;lt;option name="rowNumbers"&amp;gt;0&amp;lt;/option&amp;gt;
        &amp;lt;option name="table.drilldown"&amp;gt;all&amp;lt;/option&amp;gt;
        &amp;lt;option name="table.wrap"&amp;gt;1&amp;lt;/option&amp;gt;
        &amp;lt;option name="type"&amp;gt;list&amp;lt;/option&amp;gt;
        &amp;lt;fields&amp;gt;[]&amp;lt;/fields&amp;gt;
      &amp;lt;/event&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/form&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Mon, 25 Jan 2016 09:27:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Tokens-in-dbconnect-2-sql-query/m-p/242317#M15046</guid>
      <dc:creator>dart</dc:creator>
      <dc:date>2016-01-25T09:27:28Z</dc:date>
    </item>
    <item>
      <title>Re: Tokens in dbconnect 2 sql query??</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Tokens-in-dbconnect-2-sql-query/m-p/242318#M15047</link>
      <description>&lt;P&gt;Thanks @dart&lt;BR /&gt;
This is the code I'm working with as part of a wider project. This is the simplified version, part of a drilldown:&lt;BR /&gt;
LoadDate_tok is one of the tokens passed through from the previous dashboard.&lt;BR /&gt;
I haven't been able to get the urlescape to work.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;search&amp;gt;
    &amp;lt;query&amp;gt;
     | stats count 
     | eval LoadDate = strftime($LoadDate_tok$, "%Y-%m-%d")         
     | eval query="SELECT * FROM database.table WHERE LoadDate=$LoadDate$"
  | eval query=replace(query, " ", "%20")
  | eval query=replace(query, "=", "%3D")
    &amp;lt;/query&amp;gt;
        &amp;lt;preview&amp;gt;
          &amp;lt;condition match="'job.resultCount' &amp;gt; 0 "&amp;gt;
            &amp;lt;set token="DBTable"&amp;gt;$result.DBTable$&amp;lt;/set&amp;gt;
            &amp;lt;set token="LoadDate"&amp;gt;$result.LoadDate$&amp;lt;/set&amp;gt;
            &amp;lt;set token="query"&amp;gt;$result.query$&amp;lt;/set&amp;gt;
          &amp;lt;/condition&amp;gt;
        &amp;lt;/preview&amp;gt;
  &amp;lt;/search&amp;gt;
   &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;table&amp;gt;
          &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt; | dbxquery connection=test query=$query|u$&amp;lt;/query&amp;gt;
          &amp;lt;/search&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Tue, 26 Jan 2016 05:29:38 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Tokens-in-dbconnect-2-sql-query/m-p/242318#M15047</guid>
      <dc:creator>mrgibbon</dc:creator>
      <dc:date>2016-01-26T05:29:38Z</dc:date>
    </item>
    <item>
      <title>Re: Tokens in dbconnect 2 sql query??</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Tokens-in-dbconnect-2-sql-query/m-p/242319#M15048</link>
      <description>&lt;P&gt;Fixed, thanks @Dart&lt;/P&gt;</description>
      <pubDate>Wed, 27 Jan 2016 08:21:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Tokens-in-dbconnect-2-sql-query/m-p/242319#M15048</guid>
      <dc:creator>mrgibbon</dc:creator>
      <dc:date>2016-01-27T08:21:28Z</dc:date>
    </item>
  </channel>
</rss>

