Splunk Search

How to include quote within LIKE keyword in Dbxquery?

LearningGuy
Motivator

how to include quote within LIKE keyword in Dbxquery?
For example:    There are 10k people in the DB and I would like to query only those who contains number:123
The problem is the content has quote ".   Note I cannot filter only 123 because it will also match another record.  
name = person1
content = {"description:"test",number":123,"status":"good"}

| dbxquery connection = visibility query = "select name, content from TestDB where content like '%number":123%'

Thanks

Labels (3)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Have you tried escaping the quotation mark?  Just a guess.

| dbxquery connection = visibility query = "select name, content from TestDB where content like '%number\":123%'"

 

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...