All Apps and Add-ons

Is there a way to loop connections in DBConnect? Trying to perform a statement across several connections.

paimonsoror
Builder

Hi all;

We are trying to do some database monitoring which requires us to perform a few select statements across multiple different connections. Instead of creating about 100 saved searches that run periodically, I was hoping that I could simply leverage a for-loop that would use an inputlookup to loop a list of connection names.

Unfortunately I run into the streaming-vs-nonstreaming issue which puts me at a roadblock. Any chance that someone can assist with a possible workaround / alternative to what I am trying to accomplish?

| inputlookup dbconnection.csv
| foreach connection_name [ | dbxquery connection=<<FIELD>> query="select INSTANCE_NAME,STATUS,DATABASE_STATUS from v$instance" ]
0 Karma
1 Solution

tiagofbmm
Influencer

Hey

I believe what you are looking for is the map function.

With that you can use the exact same dbxquery to differebt connections easily.

Check the map command here https://docs.splunk.com/Documentation/Splunk/7.0.3/SearchReference/Map

View solution in original post

tiagofbmm
Influencer

Hey

I believe what you are looking for is the map function.

With that you can use the exact same dbxquery to differebt connections easily.

Check the map command here https://docs.splunk.com/Documentation/Splunk/7.0.3/SearchReference/Map

paimonsoror
Builder

Thanks so much for this, sent you the reward points 🙂

... oops ... i think i actually sent you double the points lol .... oh well.

0 Karma

paimonsoror
Builder

omg, so simple. I'm testing this now and will report back / reward!

0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...