Part of the default documentation for that app: http://docs.splunk.com/Documentation/DBX/latest/DeployDBX/Configuredatabasemonitoring
Part of the default documentation for that app: http://docs.splunk.com/Documentation/DBX/latest/DeployDBX/Configuredatabasemonitoring
can you provide an example or link as how to use the outputlookup command.
Now just use the outputlookup search command once the data is indexed to create the lookup table with a scheduled job.
the query works
SELECT * FROM table_NM WHERE ROWNUM<=30 AND TRUNC(CREATED_DT) BETWEEN to_date('04-10-2014','mm/dd/yyyy') AND to_date('04-10-2014','mm/dd/yyyy') {{AND $rising_column$ > ?}} ORDER BY CREATED_DT ASC
i was able to index data into splunk.
You did not describe the issue. Just import the data into Splunk, leave the order statement off the query and use Splunk command | sort - CREATED_DT_ASC | outputlookup yourlookuptable.csv
Does the query work when you test it? Does the data show up in Splunk?
if i schedule an cron how will i be able to solve the CREATED_DT issue..?
this is the query that i use to index data into splunk
SELECT * FROM table_NM WHERE ROWNUM<=30 AND TRUNC(CREATED_DT) BETWEEN to_date('04-10-2014','mm/dd/yyyy') AND to_date('04-10-2014','mm/dd/yyyy') {{AND $rising_column$ > ?}} ORDER BY CREATED_DT ASC
You can put it in cron format:
0 0 * * *
Would execute your script at 12 am every day of every week of every month.
A cron statement consists of five parts:
minute
hour
day of month
month
day of week
http://code.tutsplus.com/tutorials/scheduling-tasks-with-cron-jobs--net-8800
hi did you refer to "Specify query interval"