- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to use DB Connect Lookup
john_glasscock
Path Finder
10-05-2016
07:22 AM
I have created a DBConnect Lookup for a SQL Database connection. However, I am unable to get it to work correctly in my search. Any help would be appreciated.
DBConnect
Field = Card_Number Column=Account_Number
Output
Columns New Output Field
First_Name customer_first_name
Search string that is not working
index=transactions CARD_NUMBER=* |eval CARD_NUMBER = "APR00" + CARD_NUMBER | lookup db_connect_Credit_Card Account_Number as CARD_NUMBER OUTPUT First_Name as customer_first_name
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

cmerriman
Super Champion
10-11-2016
02:10 PM
do you have db connect v1 or v2? if you are on v2, I think it is OUTPUTNEW instead of OUTPUT.
http://docs.splunk.com/Documentation/DBX/2.3.1/DeployDBX/Createandmanagedatabaselookups
