topic Re: Mapping Splunk data models to Hive in Knowledge Management https://community.splunk.com/t5/Knowledge-Management/Mapping-Splunk-data-models-to-Hive/m-p/385218#M6501 <P>Yes you associate a virtual index with a Hive table.</P> Sun, 17 Feb 2019 07:27:53 GMT burwell 2019-02-17T07:27:53Z Mapping Splunk data models to Hive https://community.splunk.com/t5/Knowledge-Management/Mapping-Splunk-data-models-to-Hive/m-p/385215#M6498 <P>Anyone know how to do this? I want to read Splunk data directly through hive, without archiving data to hadoop. Thanks.</P> Sat, 16 Feb 2019 18:46:48 GMT https://community.splunk.com/t5/Knowledge-Management/Mapping-Splunk-data-models-to-Hive/m-p/385215#M6498 sabburisplunk 2019-02-16T18:46:48Z Re: Mapping Splunk data models to Hive https://community.splunk.com/t5/Knowledge-Management/Mapping-Splunk-data-models-to-Hive/m-p/385216#M6499 <P>Hello. I have successfully queried hive with Splunk.</P> <P><A href="https://docs.splunk.com/Documentation/Splunk/7.2.3/HadoopAnalytics/ConfigureHivepreprocessor">https://docs.splunk.com/Documentation/Splunk/7.2.3/HadoopAnalytics/ConfigureHivepreprocessor</A></P> <P>In a nutshell</P> <UL> <LI>you will need a license for Hadoop Analytics</LI> <LI>You either use the metastore capability or you tell Splunk what datatype each Hive field</LI> <LI>You tell Splunk the database and table name for Hive</LI> <LI>You tell Splunk the path to the Hive data and what the db paths will look like</LI> <LI>Splunk will run MUCH faster if your data has partitions</LI> </UL> <H2>- setting up the provider can be a little bewildering if you have never done it</H2> Sat, 16 Feb 2019 23:13:41 GMT https://community.splunk.com/t5/Knowledge-Management/Mapping-Splunk-data-models-to-Hive/m-p/385216#M6499 burwell 2019-02-16T23:13:41Z Re: Mapping Splunk data models to Hive https://community.splunk.com/t5/Knowledge-Management/Mapping-Splunk-data-models-to-Hive/m-p/385217#M6500 <P>Thanks a lot. will try this. Just want to make sure, the splunk data here is not archived to Hadoop. We can directly map from Hive to Splunk data model. </P> Sun, 17 Feb 2019 05:41:23 GMT https://community.splunk.com/t5/Knowledge-Management/Mapping-Splunk-data-models-to-Hive/m-p/385217#M6500 sabburisplunk 2019-02-17T05:41:23Z Re: Mapping Splunk data models to Hive https://community.splunk.com/t5/Knowledge-Management/Mapping-Splunk-data-models-to-Hive/m-p/385218#M6501 <P>Yes you associate a virtual index with a Hive table.</P> Sun, 17 Feb 2019 07:27:53 GMT https://community.splunk.com/t5/Knowledge-Management/Mapping-Splunk-data-models-to-Hive/m-p/385218#M6501 burwell 2019-02-17T07:27:53Z