Hi all,
I have encountered a weird issue in Splunk.
Basically I have added a dropdown input/filter with the following settings:
But after hitting "Apply", it says "Search produced no results".
The weird thing is if I run the search seperately, it does have results:
So does Splunk disallow using the following query in the filter/input?
|dbxquery connection=100892_intelligence query="SELECT zone_name from win_data"
You are selecting the zone_name field but your field for label/value are label and uniqueid. Do you have those fields in your returned dbxquery data?
You are selecting the zone_name field but your field for label/value are label and uniqueid. Do you have those fields in your returned dbxquery data?
You are right! Thanks for pointing it out. Now it works!
That's good - please mark the answer as the solution, as it makes it clear for others to find solutions to similar issues. Thanks.