All Apps and Add-ons

Stored Procedures


I am running a stored procedure to read and parse an xel (xEvents) trace. Unfortunately I am unable to determine a route forward for leveraging rising column. I've tried the workarounds such as if 1=2 select getdate() as mytimestampcolumn, however it doesn't populate the dropdown. I'm also unable to pass ", ?" at the end of the sproc, Splunk states that Parameter #1 has not been set. TS is a column returned by the sproc which contains the timestamp in the data.

This is what I've tried so far:
if 1=2
select getdate() as TS
EXEC xevents.dbo.usp_QueryTabularXEvents '\\server\logs\PBIQueryTrace*.xel', ?
if 1=2
select * from Bogus where TS > 'bogus' order by TS

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Observability | How to Think About Instrumentation Overhead (White Paper)

Novice observability practitioners are often overly obsessed with performance. They might approach ...

Cloud Platform | Get Resiliency in the Cloud Event (Register Now!)

IDC Report: Enterprises Gain Higher Efficiency and Resiliency With Migration to Cloud  Today many enterprises ...

The Great Resilience Quest: 10th Leaderboard Update

The tenth leaderboard update (11.23-12.05) for The Great Resilience Quest is out >> As our brave ...