All Apps and Add-ons

How to use DB Connect Lookup

john_glasscock
Path Finder

I have created a DBConnect Lookup for a SQL Database connection. However, I am unable to get it to work correctly in my search. Any help would be appreciated.

DBConnect
Field = Card_Number Column=Account_Number

Output
Columns New Output Field
First_Name customer_first_name

Search string that is not working
index=transactions CARD_NUMBER=* |eval CARD_NUMBER = "APR00" + CARD_NUMBER | lookup db_connect_Credit_Card Account_Number as CARD_NUMBER OUTPUT First_Name as customer_first_name

0 Karma

cmerriman
Super Champion

do you have db connect v1 or v2? if you are on v2, I think it is OUTPUTNEW instead of OUTPUT.

http://docs.splunk.com/Documentation/DBX/2.3.1/DeployDBX/Createandmanagedatabaselookups

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...