All Apps and Add-ons

How to join the multiple database using SQL in Splunk


Hi, how to join the multiple database using SQL in Splunk? Also, i would like to search in between 2 database and tables by comparing the fields. Thanks.

Tags (1)
0 Karma


If you haven't already figured this out, from within Splunk you will need separate connections (and hence separate SQL queries) for each database. You would then have to use a Splunk search (not SQL) to compare the indexed results. There is no way that I am aware of to have a single SQL query run against two databases without taking advantage of a DB-to-DB server-to-server link.

Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!