Hi
In dbx1, the dboutput command was used as follows :
index=_internal source=*metrics.log group=per_source_thruput
| eval opt_dt=strftime(_time,"%F")
| eval series_nm=series
| eval mb=kb/1024
| table series_nm, series, mb, opt_dt
| dboutput database=MS type=sql "insert into bigdata_splunk_daily (series_nm, series, mb, opt_dt)
values ($series_nm$, $series$, $mb$, $opt_dt$)"
How should I used it in dbx3?
You can use dbxoutput
only. Refer below doc:
http://docs.splunk.com/Documentation/DBX/3.1.3/DeployDBX/Createandmanagedatabaseoutputs#Use_dbxoutpu...
Also you can create output using UI.