Splunk Search

Select Statements

dhargaurav
Engager

I want to run 2 select statements in one search. something like

select * from my_table;
select * from your_table;

When I use the ; it gives me an error
A database error occurred: ORA-00911: invalid character

0 Karma

ziegfried
Influencer

That's not possible. dbquery can only run a single SQL statement at a time, not a SQL-script. As an alternative you can form a union:

select * from my_table union all select * from your_table

ziegfried
Influencer

What result would you expect?

0 Karma

dhargaurav
Engager

Thanks for the quick response. the above works when I union all the same table but how about different tables.

select ship_via, ship_via_desc from ship_via where ship_via in ('F150','F750')
union all
select ship_via, count(ship_via)
from carton_hdr where carton_nbr in (SELECT rpt_parm from RPT_REQST_Q
WHERE STAT_CODE = 93 AND CREATE_DATE_TIME > SYSDATE - 1) group by ship_via

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Laser Bananas and Edge Hubs: Exploring Operational Technology (OT) Data Through a ...

  OT is a different environment to traditional IT and can have interesting challenges when interfacing the ...

Event Series: Mastering AI Tokenomics and Splunk Agent Observability

Beyond the Black Box: Correlating AI Performance and Tokenomics with Splunk Agent Observability   As ...

span_metrics: The OpenTelemetry-Idiomatic Way to See Inside Your Services

You open a trace in Splunk Observability Cloud and everything looks fine. One root span, order-pipeline, with ...