https://community.splunk.com/t5/Getting-Data-In/post-DB-query-output-and-logs-Splunk-HEC/m-p/405087#M94525 <P>Why use HEC when DB Connect is purpose-built to query SQL databases and index the output?</P> Wed, 27 Jun 2018 18:02:43 GMT richgalloway 2018-06-27T18:02:43Z https://community.splunk.com/t5/Getting-Data-In/post-DB-query-output-and-logs-Splunk-HEC/m-p/405086#M94524 <P>Hi All,</P> <P>Need assistance, I have requirement to send Oracle DB query output data/logs to Splunk HEC and some of the log files also need to be sent to HEC. Could you please let me know how can we achieve this?</P> <P>Thanks!<BR /> Pavan </P> Wed, 27 Jun 2018 12:55:57 GMT https://community.splunk.com/t5/Getting-Data-In/post-DB-query-output-and-logs-Splunk-HEC/m-p/405086#M94524 kpavan 2018-06-27T12:55:57Z https://community.splunk.com/t5/Getting-Data-In/post-DB-query-output-and-logs-Splunk-HEC/m-p/405087#M94525 <P>Why use HEC when DB Connect is purpose-built to query SQL databases and index the output?</P> Wed, 27 Jun 2018 18:02:43 GMT https://community.splunk.com/t5/Getting-Data-In/post-DB-query-output-and-logs-Splunk-HEC/m-p/405087#M94525 richgalloway 2018-06-27T18:02:43Z https://community.splunk.com/t5/Getting-Data-In/post-DB-query-output-and-logs-Splunk-HEC/m-p/405088#M94526 <P>Hello @kpavan,</P> <P>If you want to use HEC, this probably means you want to send the lines of the log files as input through http.<BR /> First, if not already done, read carefully the following documentation:<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/latest/Data/AboutHEC">http://docs.splunk.com/Documentation/Splunk/latest/Data/AboutHEC</A></P> <P>Basically, using HEC would mean setting up a process to parse the log files, detect the new lines and send the content of these lines to Splunk, once the input is created in Splunk, of course.</P> <P>I hope this helps</P> Wed, 04 Jul 2018 14:56:35 GMT https://community.splunk.com/t5/Getting-Data-In/post-DB-query-output-and-logs-Splunk-HEC/m-p/405088#M94526 poete 2018-07-04T14:56:35Z