Splunk Search

Select Statements

dhargaurav
Engager

I want to run 2 select statements in one search. something like

select * from my_table;
select * from your_table;

When I use the ; it gives me an error
A database error occurred: ORA-00911: invalid character

0 Karma

ziegfried
Influencer

That's not possible. dbquery can only run a single SQL statement at a time, not a SQL-script. As an alternative you can form a union:

select * from my_table union all select * from your_table

ziegfried
Influencer

What result would you expect?

0 Karma

dhargaurav
Engager

Thanks for the quick response. the above works when I union all the same table but how about different tables.

select ship_via, ship_via_desc from ship_via where ship_via in ('F150','F750')
union all
select ship_via, count(ship_via)
from carton_hdr where carton_nbr in (SELECT rpt_parm from RPT_REQST_Q
WHERE STAT_CODE = 93 AND CREATE_DATE_TIME > SYSDATE - 1) group by ship_via

0 Karma
Get Updates on the Splunk Community!

Modern way of developing distributed application using OTel

Recently, I had the opportunity to work on a complex microservice using Spring boot and Quarkus to develop a ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had 3 releases of new security content via the Enterprise Security ...

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...