Splunk Search

How to DBX3 dbxoutput command

khyoung7410
Communicator

Hi
In dbx1, the dboutput command was used as follows :
index=_internal source=*metrics.log group=per_source_thruput
| eval opt_dt=strftime(_time,"%F")
| eval series_nm=series
| eval mb=kb/1024
| table series_nm, series, mb, opt_dt
| dboutput database=MS type=sql "insert into bigdata_splunk_daily (series_nm, series, mb, opt_dt)
values ($series_nm$, $series$, $mb$, $opt_dt$)"

How should I used it in dbx3?

Tags (1)
0 Karma

p_gurav
Champion

You can use dbxoutput only. Refer below doc:
http://docs.splunk.com/Documentation/DBX/3.1.3/DeployDBX/Createandmanagedatabaseoutputs#Use_dbxoutpu...

Also you can create output using UI.

0 Karma
Get Updates on the Splunk Community!

Leveraging Detections from the Splunk Threat Research Team & Cisco Talos

  Now On Demand  Stay ahead of today’s evolving threats with the combined power of the Splunk Threat Research ...

New in Splunk Observability Cloud: Automated Archiving for Unused Metrics

Automated Archival is a new capability within Metrics Management; which is a robust usage & cost optimization ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...