Data Lab SQL Input - Temp Table Alternatives

Getting Data In

Hello,

I have taken on a project at work to migrate all of our old MSSQL reports into Splunk. The SQL in these reports are incredibly long - like college essay long. When I copy it directly into Data Labs input, I get this error:

com.microsoft.sqlserver.jdbc.SQLServerException: The statement did not return a result set.

I assume that this is caused by the SQL creating 4 different temp tables during its search. If this is the case, is there a simple recommended alternative? I was looking at possibly outputcsv, but think it may over complicate it with there being so many different temp tables.

Thanks

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious! We’re back with another ...