https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-structure-and-some-data-from-Splunk/m-p/326499#M93840 <P>Yes, data can be exported from Splunk. Run a search for the desired data then click the Export icon (next to the printer icon).</P> Thu, 26 Oct 2017 13:01:23 GMT richgalloway 2017-10-26T13:01:23Z https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-structure-and-some-data-from-Splunk/m-p/326493#M93834 <P>Our client has been using Splunk to research logs from IT systems. <BR /> I need to make Java-integration with his Splunk. So to do this I need to understand the structure of his data.<BR /> For the first visit I would like to get the structure and some data from the client. <BR /> I have never worked with Splunk only with databases like Oracle and PostgreSQL.</P> <P>Is this possible to make some dump from the existing Splunk to get structure of the data? Also it would be nice to have some way to get some data for testing purpose. </P> Wed, 25 Oct 2017 16:09:54 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-structure-and-some-data-from-Splunk/m-p/326493#M93834 kirillchokparov 2017-10-25T16:09:54Z https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-structure-and-some-data-from-Splunk/m-p/326494#M93835 <P>Data in Splunk is unstructured (with a couple of exceptions we can ignore for now). One of the distinguishing features of Splunk is a schema is not applied to the data until it is searched. This allows for flexible "schemas" for each use case.</P> <P>The best way to integrate Splunk with SQL databases is to use the DB Connect app.</P> <P>You'll have to get test data from your client.</P> Wed, 25 Oct 2017 17:37:58 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-structure-and-some-data-from-Splunk/m-p/326494#M93835 richgalloway 2017-10-25T17:37:58Z https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-structure-and-some-data-from-Splunk/m-p/326495#M93836 <P>Hey @kirillchokparov, there's a Slack as well and some of the channels might help: <A href="http://splk.it/slack">http://splk.it/slack</A><BR /> Have you seen the developer portal? <A href="http://dev.splunk.com/">http://dev.splunk.com/</A><BR /> And we have a free intro e-learning course if you want to learn a bit more about Splunk. <A href="https://www.splunk.com/view/education/SP-CAAAAH9">https://www.splunk.com/view/education/SP-CAAAAH9</A><BR /> Here's info about the Splunk DB Connect app that @richgalloway mentioned: <A href="https://splunkbase.splunk.com/app/2686/">https://splunkbase.splunk.com/app/2686/</A> you can check out other pre-built apps in Splunkbase</P> Wed, 25 Oct 2017 20:45:49 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-structure-and-some-data-from-Splunk/m-p/326495#M93836 lfedak_splunk 2017-10-25T20:45:49Z https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-structure-and-some-data-from-Splunk/m-p/326496#M93837 <P>Thank you.</P> Thu, 26 Oct 2017 07:41:32 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-structure-and-some-data-from-Splunk/m-p/326496#M93837 kirillchokparov 2017-10-26T07:41:32Z https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-structure-and-some-data-from-Splunk/m-p/326497#M93838 <P>Thanks @Ifedak. Very usefull information.</P> Thu, 26 Oct 2017 07:44:10 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-structure-and-some-data-from-Splunk/m-p/326497#M93838 kirillchokparov 2017-10-26T07:44:10Z https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-structure-and-some-data-from-Splunk/m-p/326498#M93839 <P>@richgalloway, good day! Could you please tell what are the ways to get test data from Splunk? Can I somehow export the data from Splunk or I should get source files like CSV, that were added to Splunk by the client previously?</P> Thu, 26 Oct 2017 07:47:54 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-structure-and-some-data-from-Splunk/m-p/326498#M93839 kirillchokparov 2017-10-26T07:47:54Z https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-structure-and-some-data-from-Splunk/m-p/326499#M93840 <P>Yes, data can be exported from Splunk. Run a search for the desired data then click the Export icon (next to the printer icon).</P> Thu, 26 Oct 2017 13:01:23 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-structure-and-some-data-from-Splunk/m-p/326499#M93840 richgalloway 2017-10-26T13:01:23Z https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-structure-and-some-data-from-Splunk/m-p/326500#M93841 <P>Great. That works!</P> Thu, 26 Oct 2017 13:12:19 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-structure-and-some-data-from-Splunk/m-p/326500#M93841 kirillchokparov 2017-10-26T13:12:19Z