https://community.splunk.com/t5/Splunk-Search/How-to-join-log-file-data-from-Splunk-and-data-from-a-table-in/m-p/50574#M179560 <P>Hi All,</P> <P>I am trying to join a log file(sourceType) which is present in Splunk with data from a table in MySQL through Splunk-MySQL Connector.<BR /> I found some few examples online on the type of queries, like these ones:<BR /> 1. | mysqlquery spec=MyDB query="show tables;"<BR /> 2. | mysqlquery spec=MyDb query="SELECT * FROM MyTable;"<BR /> 3. sourcetype=access_* [ mysqlquery spec=MyDb query="SELECT customer_id WHERE purchased_item=rocking_chair" ]</P> <P>But i am getting a error while using all these. Its says "(1049, u"Unknown database 'splunk'")"</P> <P>My log file is called "Radius log" and table in MySQL is called "Cust_det" in db called "MyDB".<BR /> The log file and table have a common field called "IP_add".</P> <P>Could anyone help me out with building the query.</P> <P>Thanks!!</P> Mon, 28 Sep 2020 12:22:32 GMT alenseb 2020-09-28T12:22:32Z https://community.splunk.com/t5/Splunk-Search/How-to-join-log-file-data-from-Splunk-and-data-from-a-table-in/m-p/50574#M179560 <P>Hi All,</P> <P>I am trying to join a log file(sourceType) which is present in Splunk with data from a table in MySQL through Splunk-MySQL Connector.<BR /> I found some few examples online on the type of queries, like these ones:<BR /> 1. | mysqlquery spec=MyDB query="show tables;"<BR /> 2. | mysqlquery spec=MyDb query="SELECT * FROM MyTable;"<BR /> 3. sourcetype=access_* [ mysqlquery spec=MyDb query="SELECT customer_id WHERE purchased_item=rocking_chair" ]</P> <P>But i am getting a error while using all these. Its says "(1049, u"Unknown database 'splunk'")"</P> <P>My log file is called "Radius log" and table in MySQL is called "Cust_det" in db called "MyDB".<BR /> The log file and table have a common field called "IP_add".</P> <P>Could anyone help me out with building the query.</P> <P>Thanks!!</P> Mon, 28 Sep 2020 12:22:32 GMT https://community.splunk.com/t5/Splunk-Search/How-to-join-log-file-data-from-Splunk-and-data-from-a-table-in/m-p/50574#M179560 alenseb 2020-09-28T12:22:32Z https://community.splunk.com/t5/Splunk-Search/How-to-join-log-file-data-from-Splunk-and-data-from-a-table-in/m-p/50575#M179561 <P>Have you run through the setup in the MySQL connector app? It has a browser you can use to verify your connection details</P> Tue, 04 Sep 2012 14:49:03 GMT https://community.splunk.com/t5/Splunk-Search/How-to-join-log-file-data-from-Splunk-and-data-from-a-table-in/m-p/50575#M179561 dart 2012-09-04T14:49:03Z https://community.splunk.com/t5/Splunk-Search/How-to-join-log-file-data-from-Splunk-and-data-from-a-table-in/m-p/50576#M179562 <P>Sorry for the stupid question.</P> <P>I had to change the Schema name in the MySQL Connector. Its default value was Splunk, hence the error.</P> <P>Thanks!!</P> Tue, 04 Sep 2012 15:04:44 GMT https://community.splunk.com/t5/Splunk-Search/How-to-join-log-file-data-from-Splunk-and-data-from-a-table-in/m-p/50576#M179562 alenseb 2012-09-04T15:04:44Z https://community.splunk.com/t5/Splunk-Search/How-to-join-log-file-data-from-Splunk-and-data-from-a-table-in/m-p/50577#M179563 <P>Sorry for the stupid question.</P> <P>I had to change the Schema name in the MySQL Connector. Its default value was Splunk, hence the error.</P> <P>Thanks!!</P> Tue, 04 Sep 2012 15:05:04 GMT https://community.splunk.com/t5/Splunk-Search/How-to-join-log-file-data-from-Splunk-and-data-from-a-table-in/m-p/50577#M179563 alenseb 2012-09-04T15:05:04Z