topic Re: Splunk Unity JDBC Connect not working in Getting Data In

Splunk Unity JDBC Connect not working

kkrishnan_splun — Tue, 29 Sep 2020 23:02:19 GMT

I am trying to use the Unity JDBC Driver for splunk : http://unityjdbc.com/splunk/splunk_jdbc.php
But I keep receiving the message that it found no tables. The documentation is not detailed enough to provide information about the setup from Splunk's side. Is there some jar file that needs to be added to $SPLUNK_HOME/etc/apps/dbx/bin/lib database_types.conf file ?

Re: Splunk Unity JDBC Connect not working

vishaltaneja070 — Thu, 31 Jan 2019 06:00:10 GMT

you are using it for which database?

Re: Splunk Unity JDBC Connect not working

kkrishnan_splun — Thu, 31 Jan 2019 14:47:33 GMT

For postgreSQL

Re: Splunk Unity JDBC Connect not working

vishaltaneja070 — Thu, 31 Jan 2019 14:50:23 GMT

if you are using it with Db connect, then splunk direct database driver is available which can help you out better.
Try this:
https://jdbc.postgresql.org/

I have already tried this and working great with Splunk.

Re: Splunk Unity JDBC Connect not working

umlawren — Tue, 21 Apr 2020 22:44:00 GMT

You will want to make sure as part of the JDBC URL that you include the parameter tables=.* to retrieve all saved searches. Example: jdbc:splunk://localhost:8089?tables=.*

The ".*" is a Java RegEx match, so if you wanted to match all saved searches starting with N you would write tables=N.*.

More info on the Splunk JDBC driver including setup instructions are available.