Splunk Search

Select Statements

dhargaurav
Engager

I want to run 2 select statements in one search. something like

select * from my_table;
select * from your_table;

When I use the ; it gives me an error
A database error occurred: ORA-00911: invalid character

0 Karma

ziegfried
Influencer

That's not possible. dbquery can only run a single SQL statement at a time, not a SQL-script. As an alternative you can form a union:

select * from my_table union all select * from your_table

ziegfried
Influencer

What result would you expect?

0 Karma

dhargaurav
Engager

Thanks for the quick response. the above works when I union all the same table but how about different tables.

select ship_via, ship_via_desc from ship_via where ship_via in ('F150','F750')
union all
select ship_via, count(ship_via)
from carton_hdr where carton_nbr in (SELECT rpt_parm from RPT_REQST_Q
WHERE STAT_CODE = 93 AND CREATE_DATE_TIME > SYSDATE - 1) group by ship_via

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...