https://community.splunk.com/t5/Getting-Data-In/Forwarding-data-from-Splunk-to-some-other-exernal-SQL-server/m-p/327286#M93428 <P>Hello Team , </P> <P>we have some requirement to send data to externally hosted SQL server not all but some fields data captured from different log sources should be forwarded for display in portal for some sort of mgmt reporting <BR /> for eg :- if we have email security logs integrated in splunk some fields required would be<BR /><BR /> RECEIVED GOOD MAIL<BR /> RECEIVED SPAM<BR /> RECEIVED MALWARE<BR /> and may be from firewall these all fields inputs <BR /> Count<BR /> Threat/Content Type<BR /> Action<BR /> Threat/Content Name</P> <P>and from Vulnerability Mgmt these fileds <BR /> Asset IP Address<BR /> Asset Names<BR /> Site Name<BR /> Asset OS Name </P> <P>These are just example inputs fields which may be considered . I am bit puzzled how can we do this to effectively send only required and limited data from splunk to SQL server </P> Thu, 25 Jan 2018 21:39:46 GMT SunilMaharishi 2018-01-25T21:39:46Z https://community.splunk.com/t5/Getting-Data-In/Forwarding-data-from-Splunk-to-some-other-exernal-SQL-server/m-p/327286#M93428 <P>Hello Team , </P> <P>we have some requirement to send data to externally hosted SQL server not all but some fields data captured from different log sources should be forwarded for display in portal for some sort of mgmt reporting <BR /> for eg :- if we have email security logs integrated in splunk some fields required would be<BR /><BR /> RECEIVED GOOD MAIL<BR /> RECEIVED SPAM<BR /> RECEIVED MALWARE<BR /> and may be from firewall these all fields inputs <BR /> Count<BR /> Threat/Content Type<BR /> Action<BR /> Threat/Content Name</P> <P>and from Vulnerability Mgmt these fileds <BR /> Asset IP Address<BR /> Asset Names<BR /> Site Name<BR /> Asset OS Name </P> <P>These are just example inputs fields which may be considered . I am bit puzzled how can we do this to effectively send only required and limited data from splunk to SQL server </P> Thu, 25 Jan 2018 21:39:46 GMT https://community.splunk.com/t5/Getting-Data-In/Forwarding-data-from-Splunk-to-some-other-exernal-SQL-server/m-p/327286#M93428 SunilMaharishi 2018-01-25T21:39:46Z https://community.splunk.com/t5/Getting-Data-In/Forwarding-data-from-Splunk-to-some-other-exernal-SQL-server/m-p/327287#M93429 <P>Take a look at DB Connect:<BR /> <A href="http://docs.splunk.com/Documentation/DBX/3.1.1/DeployDBX/HowSplunkDBConnectworks">http://docs.splunk.com/Documentation/DBX/3.1.1/DeployDBX/HowSplunkDBConnectworks</A></P> <P>Get the app here:<BR /> <A href="https://splunkbase.splunk.com/app/2686/">https://splunkbase.splunk.com/app/2686/</A></P> Thu, 25 Jan 2018 22:44:37 GMT https://community.splunk.com/t5/Getting-Data-In/Forwarding-data-from-Splunk-to-some-other-exernal-SQL-server/m-p/327287#M93429 nickhills 2018-01-25T22:44:37Z