Migrate dbquery to dbxquery

[rahul2gupta]

Hi @gcusello ,

Recently I faced one issue that my old query use to work but now it no longer working.

Old Query:

|dbquery wmsewprd "select * from sys_code_type where rec_type='C'"

What we are witnessing now is that the above query is working only when we are explicitly using the schema name(wmsew) along with the table name(sys_code_type) as below.

New Query:

|dbquery wmsewprd "select * from wmsew.sys_code_type where rec_type='C'"

So I contacted Splunk support and they advised me to use dbxquery instead of dbquery so in-order to do that what  asked me to migrate the  search that uses the "dbquery" command to use "dbxquery" instead.

So can you please guide me how to migrate from dbquery to dbxquery.

Regards,

Rahul

[gcusello]

Hi @rahul2gupta,

I'm not an expert on DB-Connect, but you could see the following answer:

https://community.splunk.com/t5/All-Apps-and-Add-ons/how-to-convert-dbquery-search-to-dbxquery-searc... 

and see this documentation:

https://docs.splunk.com/Documentation/DBX/3.3.1/DeployDBX/Commands

Ciao.

Giuseppe