topic Re: ODBC - How to pass parameter to a Saved Search Query in Splunk Search

ODBC - How to pass parameter to a Saved Search Query

Noorzaie — Thu, 11 Sep 2014 15:35:17 GMT

Is there a way to pass parameter to a saved search from an ODBC connection in Excel?

(since only saved searches can be queried from an ODBC connection)

thanks.

Re: ODBC - How to pass parameter to a Saved Search Query

skylasam_splunk — Thu, 11 Sep 2014 15:45:16 GMT

No, this is not a supported scenario. You would have to craft the saved search so that you're doing the necessary filtering within the saved search.

Re: ODBC - How to pass parameter to a Saved Search Query

Noorzaie — Thu, 11 Sep 2014 18:09:00 GMT

NO 😞

How will the impact of returning a big data set and then narrowing it down in the ODBC query?

Let's say I want a specific time period in a data set, if I return a day worth of data set.

Re: ODBC - How to pass parameter to a Saved Search Query

Noorzaie — Fri, 12 Sep 2014 00:07:23 GMT

thank you!

I have saved my query but I do not see it in the list of queries in my ODBC query manager. The query is public with everyone READ access. Any thoughts?