Splunk Enterprise

How to run this type of queries in splunk

uma2356
Engager

Hi,

I'm having this type of queries, how can i run this in splunk:

SELECT FROM (SELECT rval.,ROWNUM as rn FROM(
select count(*) as count,count(1) over() as tcount, Xipm as location from documentreporting where xidcprofile='IpmApp_1' and XIPM_APP_1_9 is not null group by XIPM_APP_1_9 
rval )WHERE rn >=1 AND rn <= 100
Tags (1)
0 Karma

woodcock
Esteemed Legend

First install DB Connect V3: https://splunkbase.splunk.com/app/2686/
Then run a search like this:

| dbxquery shortnames=t "SELECT * FROM (SELECT rval.*,ROWNUM as rn FROM(select count(*)  as count,count(1) over() as tcount, Xipm  as location  from documentreporting  where xidcprofile='IpmApp_1' and XIPM_APP_1_9 is not null group by XIPM_APP_1_9 rval )WHERE rn >=1 AND rn <= 100"
0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...