Can a search using dbxquery be saved as an alert?

[dmartin]

Hi,

I'm fairly new to Splunk and am considering using Splunk DB Connect to connect to one of our databases to monitor a specific table for errors. I want an alert to be generated when the number of rows returned is greater than 0. Will the dbxquery command work with Splunk alerts? Let me know if more information is needed.

Thanks!

Dylan

[richgalloway · Accepted solution]

Yes, the dbxquery command should work fine in an alert.  Alerts are just searches that perform actions.

[dmartin]

Thank you!