Splunk Enterprise

How to run this type of queries in splunk

uma2356
Engager

Hi,

I'm having this type of queries, how can i run this in splunk:

SELECT FROM (SELECT rval.,ROWNUM as rn FROM(
select count(*) as count,count(1) over() as tcount, Xipm as location from documentreporting where xidcprofile='IpmApp_1' and XIPM_APP_1_9 is not null group by XIPM_APP_1_9 
rval )WHERE rn >=1 AND rn <= 100
Tags (1)
0 Karma

woodcock
Esteemed Legend

First install DB Connect V3: https://splunkbase.splunk.com/app/2686/
Then run a search like this:

| dbxquery shortnames=t "SELECT * FROM (SELECT rval.*,ROWNUM as rn FROM(select count(*)  as count,count(1) over() as tcount, Xipm  as location  from documentreporting  where xidcprofile='IpmApp_1' and XIPM_APP_1_9 is not null group by XIPM_APP_1_9 rval )WHERE rn >=1 AND rn <= 100"
0 Karma
Get Updates on the Splunk Community!

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Did you know that for Splunk Enterprise 9.4, Python 3.9 is the default interpreter? This shift is not just a ...