Splunk DB Connect 1: Is it possible to use an eval before dbquery?

[sfatnass]

Hi everybody,

I want to know if it's possible to use an eval before [dbquery "select blablabla"]

For example:

index="indexA" OR index="indexB" |eval newfield=field1 |stats values(newfield) as newfield values(field2) as field2 by  field1 
[dbquery mydatabase "select field2 from my_table"|fields + field2] 

well i'm trying to get something like that, but splunk said eval is not used properly

I need to record all values of field1 from the index.
The lookup cannot be used for the requested sql.
if anybody have any idea thx

[fdi01]

try lik:

|dbquery mydatabase "select field2 from my_table"|fields + field2|appendcols [ search index="indexA" OR index="indexB" |eval newfield=field1 |stats values(newfield) as newfield values(field2) as field2 by field1] 

[sfatnass]

finally the kvstore resolve my problem thx

[sfatnass]

the dbquery not match with my index
for informaitons i use many dbquery in my request splunk

[fdi01]

ok try like :
|dbquery mydatabase "select field2 from my_table"|fields + field2|appendcols [ search index="indexA" OR index="indexB" |eval newfield=field1] |stats values(newfield) as newfield values(field2) as field2 by field1