All Apps and Add-ons

Map search with dbxquery is not returning any Result

Explorer

I have written the below query, but I am not getting any result for this query:

|stats values(val) as val by category |map search="| dbxquery connection=SplunkToHive query="select * from dat where year='2020' and month='08' and day='24' and name like '%$category$%'"  |  table category, value"

 

Can someone please help me ?

Super Champion

Hi @Nikitha ... not sure how i can help you.. but,.. can you troubleshoot this step by step.. searching only first part, then with a simple map command, then increasing one by one conditions on the map command.. 

let us know how it goes, may be others can help with your further updates. thanks. 

0 Karma

Explorer

When I try to hardcode the category value, I get 50 events:
| dbxquery connection="SplunkToHive" query="select * from dat where year='2020' and month='08' and day='24' and name like '%Cars%'"  |  table category, value

Only when I use map search, I am not able to get any output. I need to use map search as my Category needs to be an input

Tags (2)
0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!