https://community.splunk.com/t5/All-Apps-and-Add-ons/How-do-I-configure-DB-Connect-to-Forward-Events/m-p/71025#M4451 <P>Thank you. Works. I had only configured UFs before, so I was unsure what to do configuring the search head to forward.</P> Fri, 21 Jun 2013 18:38:42 GMT jakesony 2013-06-21T18:38:42Z https://community.splunk.com/t5/All-Apps-and-Add-ons/How-do-I-configure-DB-Connect-to-Forward-Events/m-p/71020#M4446 <P>Hi,</P> <P>I'm sure there is an easy answer to this. I have installed DB Connect on a search head and have it configured to watch a particular table. Setup saves without errors and I can see that the polling is active in dbx.log</P> <P>I want to forward the events that DBC is picking up to my indexers. How do I do that? I don't want the search head to index the events itself, I just want to forward them on.</P> <P>Thanks</P> Fri, 21 Jun 2013 01:04:31 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-do-I-configure-DB-Connect-to-Forward-Events/m-p/71020#M4446 jakesony 2013-06-21T01:04:31Z https://community.splunk.com/t5/All-Apps-and-Add-ons/How-do-I-configure-DB-Connect-to-Forward-Events/m-p/71021#M4447 <P>Hi. It depends how you want to use the data... For instance, if you want it to be a lookup, you could outputlookup and then let Splunk take care of the rest.</P> Fri, 21 Jun 2013 01:14:56 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-do-I-configure-DB-Connect-to-Forward-Events/m-p/71021#M4447 jcoates_splunk 2013-06-21T01:14:56Z https://community.splunk.com/t5/All-Apps-and-Add-ons/How-do-I-configure-DB-Connect-to-Forward-Events/m-p/71022#M4448 <P>The data that I'm trying to extract from the DB is log data. I would like to see when I search in Splunk just like other events that I'm indexing.</P> Fri, 21 Jun 2013 03:22:34 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-do-I-configure-DB-Connect-to-Forward-Events/m-p/71022#M4448 jakesony 2013-06-21T03:22:34Z https://community.splunk.com/t5/All-Apps-and-Add-ons/How-do-I-configure-DB-Connect-to-Forward-Events/m-p/71023#M4449 <P>I see. You need to configure an input then, <A href="http://docs.splunk.com/Documentation/DBX/1.0.10/DeployDBX/inputsspec">http://docs.splunk.com/Documentation/DBX/1.0.10/DeployDBX/inputsspec</A></P> Fri, 21 Jun 2013 04:08:38 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-do-I-configure-DB-Connect-to-Forward-Events/m-p/71023#M4449 jcoates_splunk 2013-06-21T04:08:38Z https://community.splunk.com/t5/All-Apps-and-Add-ons/How-do-I-configure-DB-Connect-to-Forward-Events/m-p/71024#M4450 <P>You need to configure an outputs.conf on your machine to forward to the indexers. Once you have an outputs.conf set up correctly, the instance will forward accordingly. It's okay to do this on a search head if load is light, but I would suggest you consider having a dedicated Splunk forwarder instance instead for collecting the data and then forwarding it.</P> <P>(Do not simply enable your search head with the Forwarder or LightForwarder app. This will let you collect and forward data, yes, but it will also do things like disable the GUI that you would not want to happen on a search head.)</P> Fri, 21 Jun 2013 05:48:39 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-do-I-configure-DB-Connect-to-Forward-Events/m-p/71024#M4450 gkanapathy 2013-06-21T05:48:39Z https://community.splunk.com/t5/All-Apps-and-Add-ons/How-do-I-configure-DB-Connect-to-Forward-Events/m-p/71025#M4451 <P>Thank you. Works. I had only configured UFs before, so I was unsure what to do configuring the search head to forward.</P> Fri, 21 Jun 2013 18:38:42 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-do-I-configure-DB-Connect-to-Forward-Events/m-p/71025#M4451 jakesony 2013-06-21T18:38:42Z