All Apps and Add-ons

Map search with dbxquery is not returning any Result

Nikitha
Explorer

I have written the below query, but I am not getting any result for this query:

|stats values(val) as val by category |map search="| dbxquery connection=SplunkToHive query="select * from dat where year='2020' and month='08' and day='24' and name like '%$category$%'"  |  table category, value"

 

Can someone please help me ?

inventsekar
Super Champion

Hi @Nikitha ... not sure how i can help you.. but,.. can you troubleshoot this step by step.. searching only first part, then with a simple map command, then increasing one by one conditions on the map command.. 

let us know how it goes, may be others can help with your further updates. thanks. 

0 Karma

Nikitha
Explorer

When I try to hardcode the category value, I get 50 events:
| dbxquery connection="SplunkToHive" query="select * from dat where year='2020' and month='08' and day='24' and name like '%Cars%'"  |  table category, value

Only when I use map search, I am not able to get any output. I need to use map search as my Category needs to be an input

Tags (2)
0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!