Splunk Search

How to setup multiple SQL statements in a single DB Connection input

tpirozzi
Explorer

Hi Everyone,

I am creating DB inputs in the Splunk DB Connector 3.0.2. I would like to run 2 sql statements or possibly more in some instances . When I use a semi column to separate in the Choose and Preview with the editor version sql I get

Invalid Query
java.sql.SQLSyntaxErrorException: ORA-00922: missing or invalid option

Here is an example:

alter session set current_schema=test;
select
column1
from
test_table

Any help appreciated.

Tags (1)
0 Karma

tpirozzi
Explorer

Thanks. That is what I have done so maybe this is a bad example. I guess the ultimate question is does it support multiple sql statements or do I have to combine into one? I have looked for the answer but did not find anything in the docs.

0 Karma

gjanders
SplunkTrust
SplunkTrust

I do not believe the underlying JDBC statement will allow this but happy to be proven wrong here !

0 Karma

gjanders
SplunkTrust
SplunkTrust

In your example why not just use:
select
column1
from
test.test_table

Some databases might allow multiple queries via JDBC statements (where JDBC statements are what the DB input is really running) but by default most will not.

0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...