All Apps and Add-ons

dbinput with dbquery

mustafag
Path Finder

Hi,
I have logs in one database which I have importing through db input through splunk and it's working fine. Now in this input log, one column has a number value. I have created db lookups which map this column number with another table's field which has respective values.
How can I use this dblookups during the db input times so it can create the new field with respective values from db lookup table?

0 Karma
1 Solution

mustafag
Path Finder

Got the answer. Just used the Join statement in db input configuration as both table was on same database.

View solution in original post

0 Karma

mustafag
Path Finder

Got the answer. Just used the Join statement in db input configuration as both table was on same database.

0 Karma
Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and stall ...

Print, Leak, Repeat: UEBA Insider Threats You Can't Ignore

Are you ready to uncover the threats hiding in plain sight? Join us for "Print, Leak, Repeat: UEBA Insider ...

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...