All Apps and Add-ons

DB Connect dbxquery works fine, but not dbxlookup

phunte
Explorer

Hi,

Has anyone run into this? I am still on DB Connect 3.2 and have used dbxquery successfully for years. I am just trying to use dbxlookup but cannot get even a simple example to work?

 

| makeresults count=3 | streamstats count as id | dbxlookup connection="agena_ro" query="SELECT * FROM `agena_production`.`plans`" "id" AS "id" OUTPUT "description" AS "description"

 

I see this in the logs that looks suspicious?


2021-08-09 15:19:37.141 11088@prod3splunksearchl [main] INFO com.splunk.dbx.connector.logger.AuditLogger - operation= connection_name= stanza_name= state=success sql='SELECT "id", "description" FROM (SELECT * FROM `agena_production`.`plans`) dbxlookup WHERE "id" IN (?,?,?)'

 

Thanks.

phunte

Labels (1)
0 Karma

louismai
Path Finder

dbxlookup doesn't seem to work when I tried to run. The query doesn't provide any outputs when I clicked Open in Search in Data Lab/ Edit Lookup page. Both my reference search and Look SQL are working, and provide correct results when running separately.

0 Karma

codebuilder
Influencer

dbxquery connects to a configured database, so you cant use makeresults for testing queries.

----
An upvote would be appreciated and Accept Solution if it helps!
0 Karma

phunte
Explorer

Thanks codebuilder but I don't understand? I am only using makeresults to test the dbxlookup?

0 Karma
Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...