Splunk Search

dbx date parameters for apache drill in splunk

priyanka0309
New Member

I am trying to use apache drill to query mapr data via splunk.

Using a dbx to use the name

|dbxquery connection="Drill_" query="select count(a) as a, cast(TIME as date) as day
from table where time >= ? AND time <= ?

group by cast(TIME as date) " [|makeresults | addinfo | eval et=round(info_min_time, 0) | eval lt=if(info_max_time='+Infinity', 'now', round(info_max_time, 0)) | eval et=strftime(et,"%F")|eval lt=strftime(lt,"%F %T.%1N") | eval params=et.",".lt | fields params | format "" "" "" "" "" ""]

I get the error java.sql.SQLException: [MapR]JDBC Invalid parameter index: 1.

Looking for help

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...