Splunk Search

|dbxquery query="SELECT DISTINCT last_name FROM hr.employees" connection="ORCL_PDB1_CONN"

jaxxsplunk
Explorer

Building a Dashboard dropdown.
The following query works fine and there are no duplicates in the resultset however the dashboard filter has the message "Duplicates values causing conflict". When I hover over this message a pop up show the following:
Error in 'dbxquery command'. This command is not supported in realtime search.

the query is ...
|dbxquery query="SELECT DISTINCT last_name FROM hr.employees" connection="ORCL_PDB1_CONN"
Using SPLUNK DB COnnect APP

In advance, thanks for you comments/insights and assistance.

Tags (1)
0 Karma

woodcock
Esteemed Legend

Your admin should have disabled all realtime; it is nothing but trouble. Do not use realtime with this command. The timepicker is ignored anyway.

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Use a non-realtime timerange for dbxquery.

0 Karma
Get Updates on the Splunk Community!

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...

Splunk App Developers | .conf25 Recap & What’s Next

If you stopped by the Builder Bar at .conf25 this year, thank you! The retro tech beer garden vibes were ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...