SPLUNK DB connect to database where table name is variable


Dear SPLUNK users,

i have a question regarding SPLUNK DB Connect, as i want to access database (MySQL) where the table name is varied daily according to the timestamp.

So there a way to access these table through SPLUNK DB connect?

please advise

0 Karma


Did you try something like SELECT [table1].[column], [table1].[another-column], [table2].[column] FROM [table1], [table2]; in the input editor?
I’m having a bit of a hard time understanding what you mean with ‘variable table name based in timestamp’?

0 Karma