Use the Splunk Search EarliestTime and LatestTime timestamps for query in oracle DB

[dominiquevocat]

I would like to select a number of records in a view on a Oracle DB. I have a field where there is a Oracle Timestamp and i would like to select records which are OracleTimestamp >= EarliestTime and OracleTimestamp <= LatestTime.

I can't figure out how to use the searchtime parameters with dbconnect and how to transform them.

[ziegfried · Accepted solution]

This is currently not possible. I have filed an enhancement request, so it might be added in a future version of DB Connect.

As a workaround, it is possible to filter results matching the selected timerange in the Splunk query: http://splunk-base.splunk.com/answers/75999/splunk-db-connect-dbquery-inline-search-and-time-filteri...

[dominiquevocat]

Thought so. Thanks anyway.