All Apps and Add-ons

dbx query


I am getting the following error when try to make a new input "java.lang.IllegalStateException: Column name conflicted, please set shortnames option to false and retry" my query is as followed 


FROM [LOG].ActivityDetail a
INNER JOIN setup.ProcessGovernance b
ON a.ProcessGovernance1Up=b.ProcessGovernance1up
WHERE b.ProcessStatus1Up=3
AND Severity = 3
AND IndentLevel=1;


I am horrible with sql so I have no idea what to do. 


thank you! 

Labels (2)
0 Karma

Path Finder

Rather late, but if you still struggle with this the issue, or for others that find this :

Splunk dbX drops table name and only uses the field name. (the 'shortnames' option mentioned). What you can to do is alias fields with the same name in both tables. 

SELECT DISTINCT a.ProcessGovernance1Up AS 1upa, b.ProcessGovernance1up AS 1upb, <other fields you want>
FROM [LOG].ActivityDetail a
INNER JOIN setup.ProcessGovernance b
ON 1upa=1upb
WHERE 1upb=3
AND Severity = 3
AND IndentLevel=1;

You may be able to replace <other fields you want> with * but I'm not sure without testing.

Regards, R. 

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...

Announcing the 1st Round Champion’s Tribute Winners of the Great Resilience Quest

We are happy to announce the 20 lucky questers who are selected to be the first round of Champion's Tribute ...

We’ve Got Education Validation!

Are you feeling it? All the career-boosting benefits of up-skilling with Splunk? It’s not just a feeling, it's ...