I have written the below query, but I am not getting any result for this query:
|stats values(val) as val by category |map search="| dbxquery connection=SplunkToHive query="select * from dat where year='2020' and month='08' and day='24' and name like '%$category$%'" | table category, value"
Hi @Nikitha ... not sure how i can help you.. but,.. can you troubleshoot this step by step.. searching only first part, then with a simple map command, then increasing one by one conditions on the map command..
let us know how it goes, may be others can help with your further updates. thanks.
When I try to hardcode the category value, I get 50 events: | dbxquery connection="SplunkToHive" query="select * from dat where year='2020' and month='08' and day='24' and name like '%Cars%'" | table category, value
Only when I use map search, I am not able to get any output. I need to use map search as my Category needs to be an input