All Apps and Add-ons

DB Connect dbxquery works fine, but not dbxlookup

phunte
Explorer

Hi,

Has anyone run into this? I am still on DB Connect 3.2 and have used dbxquery successfully for years. I am just trying to use dbxlookup but cannot get even a simple example to work?

 

| makeresults count=3 | streamstats count as id | dbxlookup connection="agena_ro" query="SELECT * FROM `agena_production`.`plans`" "id" AS "id" OUTPUT "description" AS "description"

 

I see this in the logs that looks suspicious?


2021-08-09 15:19:37.141 11088@prod3splunksearchl [main] INFO com.splunk.dbx.connector.logger.AuditLogger - operation= connection_name= stanza_name= state=success sql='SELECT "id", "description" FROM (SELECT * FROM `agena_production`.`plans`) dbxlookup WHERE "id" IN (?,?,?)'

 

Thanks.

phunte

Labels (1)
0 Karma

louismai
Path Finder

dbxlookup doesn't seem to work when I tried to run. The query doesn't provide any outputs when I clicked Open in Search in Data Lab/ Edit Lookup page. Both my reference search and Look SQL are working, and provide correct results when running separately.

0 Karma

codebuilder
Influencer

dbxquery connects to a configured database, so you cant use makeresults for testing queries.

----
An upvote would be appreciated and Accept Solution if it helps!
0 Karma

phunte
Explorer

Thanks codebuilder but I don't understand? I am only using makeresults to test the dbxlookup?

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...