Splunk Search
Highlighted

ODBC - How to pass parameter to a Saved Search Query

Explorer

Is there a way to pass parameter to a saved search from an ODBC connection in Excel?

(since only saved searches can be queried from an ODBC connection)

thanks.

0 Karma
Highlighted

Re: ODBC - How to pass parameter to a Saved Search Query

Splunk Employee
Splunk Employee

No, this is not a supported scenario. You would have to craft the saved search so that you're doing the necessary filtering within the saved search.

0 Karma
Highlighted

Re: ODBC - How to pass parameter to a Saved Search Query

Explorer

thank you!

I have saved my query but I do not see it in the list of queries in my ODBC query manager. The query is public with everyone READ access. Any thoughts?

0 Karma
Highlighted

Re: ODBC - How to pass parameter to a Saved Search Query

Explorer

NO 😞

How will the impact of returning a big data set and then narrowing it down in the ODBC query?

Let's say I want a specific time period in a data set, if I return a day worth of data set.

0 Karma