All Apps and Add-ons

Help to convert sql query to splunk query

sahil237888
Path Finder

Hi Experts,

Can anyone help me in converting below sql query to splunk query.I really dont have any clue for percentile_cont thing.

SELECT class_id,round(avg(percent/100,2) as percentage,
round(percentile_cont(0.05) within group (order by percent/100),3) as AmarksPerntl,
round(percentile_cont(0.09) within group (order by percent/100),3) as BmarksPerntl
from myTable group by class_id
order by 2 desc

Tags (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

You should find some helpful information at http://www.innovato.com/splunk/SQLSplunk.html .

---
If this reply helps you, an upvote would be appreciated.
0 Karma

sahil237888
Path Finder

@richgalloway, this URL is not working,Not found error while browsing this URL.

0 Karma

niketnilay
Legend

@sahil237888 there was an extra dot at the end of the URL because of which it was not working. However, similar document you can also find in the Splunk Documentation link:

https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/SQLtoSplunk

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The link provided by @niketnilay is the one I was looking for, however, so try that.

---
If this reply helps you, an upvote would be appreciated.
0 Karma

Sukisen1981
Champion

nah won't do 🙂 🙂
is it not possible for you to just post a sample of your events and fields and then tell us your expected splunk output?
that way it will be easier for us to come up with a query that fits your needs...

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!