topic Re: How to query a field in DBXQuery that contains colon? in Splunk Search

How to query a field in DBXQuery that contains colon?

LearningGuy — Wed, 30 Aug 2023 14:55:14 GMT

Hello,
How to query a field in DBXQuery that contains colon?
I ran the following query and got an error. Thank you
| dbxquery connection=visibility query="select abc:def from tableCompany"
org.postgresql.util.PSQLException: ERROR: syntax error at or near ":" Position:

I tried to put single quote
| dbxquery connection=visibility query="select 'abc:def' from tableCompany"
but it gave me the following result

?column?

abc:def

Re: How to query a field in DBXQuery that contains colon?

etoombs — Thu, 31 Aug 2023 11:42:45 GMT

Try brackets around the field name - [abc:def]

Re: How to query a field in DBXQuery that contains colon?

LearningGuy — Thu, 31 Aug 2023 13:26:52 GMT

Hello,
I put brackets around the field name [abc:def], but it still didn't work and got the following error
org.postgresql.util.PSQLException: ERROR: syntax error at or near "["

Thank you

Re: How to query a field in DBXQuery that contains colon?

etoombs — Thu, 31 Aug 2023 15:11:13 GMT

My bad. I didn't look to see what database you were using. You may need quotes around it = "abc:def". Since you're doing this inside a quoted string, you may need to escape them as \" in the string.

Re: How to query a field in DBXQuery that contains colon?

LearningGuy — Thu, 31 Aug 2023 17:59:47 GMT

Your suggestion worked. Thank you so much
| dbxquery connection=visibility query="select \"abc:def\" from tableCompany"