Documentation at: http://docs.splunk.com/Documentation/DBX/latest/DeployDBX/Commands#dboutput
For SQlite, i tried..
-- Created a Sample in normal SQlite Command line to see if everything works
CREATE TABLE [Genre]
(
[GenreId] INTEGER NOT NULL,
[Name] NVARCHAR(120)
);
INSERT INTO [Genre] ([GenreId], [Name]) VALUES (1, 'Rock');
After installing Splunk DB connect, via Splunk Search I tried Select Query
| dbquery "mySampleDB" "SELECT * FROM Genre" limit=1000
Output is
GenreId Name
1 Rock
Sample Insert Query is:
*| head 1|eval GenreId=2 | eval Name="myOpera" | table GenreId,Name | table GenreId,Name| dboutput type=insert database=mySampleDB table=Genre GenreId Name
Selecting again:
| dbquery "mySampleDB" "SELECT * FROM Genre" limit=1000
Output is now:
GenreId Name
1 Rock
2 myOpera
... View more