https://community.splunk.com/t5/Getting-Data-In/Extracting-of-SQLite/m-p/79192#M16223 <P>Have a look on a solution I found to use sqlite3 inside python lookup scripts:</P> <P><A href="http://answers.splunk.com/answers/109009/splunk6-django-app-importing-sqlite">http://answers.splunk.com/answers/109009/splunk6-django-app-importing-sqlite</A></P> <P>Once you have the sqlite module installed you could write a python script to "SELECT" your data from the sqlite3 file. If you use a script input in Splunk, your script just just needs to output something like that to the screen:</P> <P>2014-06-24 14:00:12 +10:00, table="table01", columnA="value from clA row1", columnB="value from clB row1"<BR /> 2014-06-24 14:00:13 +10:00, table="table01", columnA="value from clA row2", columnB="value from clB row2"</P> <P>Make sure you handle the exceptions on your script and output errors to stderr so it won't index those messages.</P> Mon, 23 Jun 2014 22:37:26 GMT musskopf 2014-06-23T22:37:26Z https://community.splunk.com/t5/Getting-Data-In/Extracting-of-SQLite/m-p/79191#M16222 <P>Hello i would like to extract SQLite data and pass to splunk using shell script.<BR /> Anyone have any idea how to write the shell script?</P> Wed, 02 Oct 2013 01:27:13 GMT https://community.splunk.com/t5/Getting-Data-In/Extracting-of-SQLite/m-p/79191#M16222 jiamin94 2013-10-02T01:27:13Z https://community.splunk.com/t5/Getting-Data-In/Extracting-of-SQLite/m-p/79192#M16223 <P>Have a look on a solution I found to use sqlite3 inside python lookup scripts:</P> <P><A href="http://answers.splunk.com/answers/109009/splunk6-django-app-importing-sqlite">http://answers.splunk.com/answers/109009/splunk6-django-app-importing-sqlite</A></P> <P>Once you have the sqlite module installed you could write a python script to "SELECT" your data from the sqlite3 file. If you use a script input in Splunk, your script just just needs to output something like that to the screen:</P> <P>2014-06-24 14:00:12 +10:00, table="table01", columnA="value from clA row1", columnB="value from clB row1"<BR /> 2014-06-24 14:00:13 +10:00, table="table01", columnA="value from clA row2", columnB="value from clB row2"</P> <P>Make sure you handle the exceptions on your script and output errors to stderr so it won't index those messages.</P> Mon, 23 Jun 2014 22:37:26 GMT https://community.splunk.com/t5/Getting-Data-In/Extracting-of-SQLite/m-p/79192#M16223 musskopf 2014-06-23T22:37:26Z