Package org.apache.drill.exec.store.splunk
package org.apache.drill.exec.store.splunk
-
ClassDescriptionThere are two known time columns in Splunk, the _time and _indextime.This class wraps the functionality of the Splunk connection for Drill.The Splunk storage plugin accepts filters which are: A single column = value expression An AND'ed set of such expressions, If the value is one with an unambiguous conversion to a string.These are special fields that alter the queries sent to Splunk.