Yes, you can use the DB Connect search commands and lookups. The most common usage of DB Connect is to use lookups from a database table to enrich machine data.
That is well documented here:
Setup a lookup table
The other option is to use the DB connect search commands such as dbquery:
DB Connect search commands
As an example, you could use dbquery on it's own or you could join it, use it in a subsearch, append it and more.
Here is what the dbquery command looks like:
| dbquery ASSET_DB "SELECT id,name, ip_address,owner,last_update FROM hosts WHERE active = 1"
That should be pretty easy to understand.
... View more