topic Setting host value from DB Connect SQL statement results in Getting Data In

Setting host value from DB Connect SQL statement results

joesrepsolc — Fri, 09 Oct 2020 23:17:11 GMT

While creating a new DB Input in DB Connect 3.4.0, i need to set the host value per event as it is indexed. Its a SQL statement with a column named "DeviceName", and I want the host=[DeviceName value] for each event.

So far I can only hard set the host value in the input, but not based on the data.

Help anyone? Thanks!

Joe

Re: Setting host value from DB Connect SQL statement results

isoutamo — Sat, 10 Oct 2020 06:32:43 GMT

Hi
Based on docs, you could try the next.
As DBX currently use HEC and it supports remote HEC server you can do that as other props+transforms field pickup and change on your general HEC configurations.

https://docs.splunk.com/Documentation/DBX/3.4.0/DeployDBX/ConfigureDBConnectsettings
And there chapter “ Configure remote HTTP Event Collector (HEC)”

Probably this works also on the same node where DBXis running.
r. Ismo