- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
lennys26
Communicator
06-14-2022
02:11 AM
When using DBXQUERY, is the a |search needed after the query?
| dbxquery connection="DRTP-Connection" query="
SELECT
<X, Y, Z>
FROM <wherever>
WHERE <wherever>;"
| search
| table X, Y, Z
| sort - Z
My query appears to work either way, but I have often been critical about using extra 'search' commands within a query, so I am curious as to whether there is a performance hit.
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ITWhisperer
SplunkTrust
06-14-2022
02:25 AM
Have a look at the job inspector for both versions of the query (with and without the extra search). If it is working without the extra search, personally, I would remove it 😀
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ITWhisperer
SplunkTrust
06-14-2022
02:25 AM
Have a look at the job inspector for both versions of the query (with and without the extra search). If it is working without the extra search, personally, I would remove it 😀
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
lennys26
Communicator
06-14-2022
04:08 AM
That's what I was thinking. The job inspector shows no noticeable difference so I will remove it.
Thanks.