Splunk Search

Select Statements

dhargaurav
Engager

I want to run 2 select statements in one search. something like

select * from my_table;
select * from your_table;

When I use the ; it gives me an error
A database error occurred: ORA-00911: invalid character

0 Karma

ziegfried
Influencer

That's not possible. dbquery can only run a single SQL statement at a time, not a SQL-script. As an alternative you can form a union:

select * from my_table union all select * from your_table

ziegfried
Influencer

What result would you expect?

0 Karma

dhargaurav
Engager

Thanks for the quick response. the above works when I union all the same table but how about different tables.

select ship_via, ship_via_desc from ship_via where ship_via in ('F150','F750')
union all
select ship_via, count(ship_via)
from carton_hdr where carton_nbr in (SELECT rpt_parm from RPT_REQST_Q
WHERE STAT_CODE = 93 AND CREATE_DATE_TIME > SYSDATE - 1) group by ship_via

0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

[Puzzles] Solve, Learn, Repeat: Unmerging HTML Tables

[Puzzles] Solve, Learn, Repeat: Unmerging HTML TablesFor a previous puzzle, I needed some sample data, and ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...