All Apps and Add-ons

Help with Splunk DB connect Rising search

dorbi
Explorer

i have this search:

 

 

 

SELECT
C_ID,
REPLACE(REPLACE(REPLACE(REPLACE(C_XML,'"',''''), CHAR(13), ''), CHAR(10), ''),'  ','') as C_XML,
C_TENANT_ID,
C_MESSAGE_PRIORITY,
C_CREATED_DATE_TIME,
C_WAS_PROCESSED,
C_LOGICAL_ID
FROM "ElbitErrorHandlingDB"."dbo"."COR_INBOX_ENTRY" 
WHERE C_CREATED_DATE_TIME > ?
ORDER BY C_CREATED_DATE_TIME ASC

 

 

and i want to add 

 

 

and

 

 

 

clause to the where section.

for some reason it doesn't work.

i tried:

 

 

SELECT
C_ID,
REPLACE(REPLACE(REPLACE(REPLACE(C_XML,'"',''''), CHAR(13), ''), CHAR(10), ''),'  ','') as C_XML,
C_TENANT_ID,
C_MESSAGE_PRIORITY,
C_CREATED_DATE_TIME,
C_WAS_PROCESSED,
C_LOGICAL_ID
FROM "ElbitErrorHandlingDB"."dbo"."COR_INBOX_ENTRY" 
WHERE C_CREATED_DATE_TIME > ?
and C_CREATED_DATE_TIME > convert(varchar,'2022-08-31',121) 
ORDER BY C_CREATED_DATE_TIME ASC

 

 

and i tried:

 

 

SELECT
C_ID,
REPLACE(REPLACE(REPLACE(REPLACE(C_XML,'"',''''), CHAR(13), ''), CHAR(10), ''),'  ','') as C_XML,
C_TENANT_ID,
C_MESSAGE_PRIORITY,
C_CREATED_DATE_TIME,
C_WAS_PROCESSED,
C_LOGICAL_ID
FROM "ElbitErrorHandlingDB"."dbo"."COR_INBOX_ENTRY" 
WHERE C_CREATED_DATE_TIME > convert(varchar,'2022-08-31',121) 
AND C_CREATED_DATE_TIME > ?
ORDER BY C_CREATED_DATE_TIME ASC

 

 

both didn't worked.

any advice?

0 Karma
1 Solution

dorbi
Explorer

The problem was with the data itself (heavy).

Issues can be closed 

View solution in original post

0 Karma

dorbi
Explorer

The problem was with the data itself (heavy).

Issues can be closed 

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Catalog Is Now Generally Available on Splunk Cloud Platform

A Unified View of Your Data  Security logs, application events, business data, and historical telemetry often ...

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner   Watch on demand us for a demo-driven ...