Splunk Search

DB Connect - another "index 1 is out of range" - how to fix it?

arimaldo
Explorer

Trying to pull specific fields out of the database tables "LastContact" and listing the output with a timestamp (LastContact), ManagerName (hostname), OSType etc. This is the query I'm using:

SELECT [Hostname], [ManagerName],[OSType],[LastContact]FROM [SCSPDB].[dbo].[ASSET_VW] WHERE LastContact < dateadd(day,-1,getdate());

Works fine in SQL Explorer but not in DBX (errors out with the "index 1 out of range" message). Do I need to change my query from using a Rising Column (LastContact) to something else?

Tags (1)
0 Karma
1 Solution

arimaldo
Explorer

I answered my own question.....DBX is very finicky about its queries. This particular query is too static and DBX requires a "?" in order for the Rising Column to assign a value. This works:

SELECT [Hostname], [ManagerName],[OSType],[LastContact]FROM [SCSPDB].[dbo].[ASSET_VW] WHERE LastContact > ? ORDER BY LastContact ASC

View solution in original post

0 Karma

arimaldo
Explorer

I answered my own question.....DBX is very finicky about its queries. This particular query is too static and DBX requires a "?" in order for the Rising Column to assign a value. This works:

SELECT [Hostname], [ManagerName],[OSType],[LastContact]FROM [SCSPDB].[dbo].[ASSET_VW] WHERE LastContact > ? ORDER BY LastContact ASC

View solution in original post

0 Karma
Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!