Splunk Search

DB Connect - another "index 1 is out of range" - how to fix it?

arimaldo
Explorer

Trying to pull specific fields out of the database tables "LastContact" and listing the output with a timestamp (LastContact), ManagerName (hostname), OSType etc. This is the query I'm using:

SELECT [Hostname], [ManagerName],[OSType],[LastContact]FROM [SCSPDB].[dbo].[ASSET_VW] WHERE LastContact < dateadd(day,-1,getdate());

Works fine in SQL Explorer but not in DBX (errors out with the "index 1 out of range" message). Do I need to change my query from using a Rising Column (LastContact) to something else?

Tags (1)
0 Karma
1 Solution

arimaldo
Explorer

I answered my own question.....DBX is very finicky about its queries. This particular query is too static and DBX requires a "?" in order for the Rising Column to assign a value. This works:

SELECT [Hostname], [ManagerName],[OSType],[LastContact]FROM [SCSPDB].[dbo].[ASSET_VW] WHERE LastContact > ? ORDER BY LastContact ASC

View solution in original post

0 Karma

arimaldo
Explorer

I answered my own question.....DBX is very finicky about its queries. This particular query is too static and DBX requires a "?" in order for the Rising Column to assign a value. This works:

SELECT [Hostname], [ManagerName],[OSType],[LastContact]FROM [SCSPDB].[dbo].[ASSET_VW] WHERE LastContact > ? ORDER BY LastContact ASC

0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...