topic Re: How do I access data in Splunk via PowerBi? in Dashboards & Visualizations

How do I access data in Splunk via PowerBi?

hgarnica — Tue, 09 May 2023 16:20:25 GMT

I have a local install of SPlunk Enterprise 9.0.4.1 64bit, I installed the 64bit ODBC Driver and configured the data source.

I then go to PowerBi to GetData via ODBC, I get a list of tables. When I select a table some data visible while some tables generate an error as follows:

DataSource.Error: ODBC: ERROR [HY000] [Splunk][SplunkODBC] (140) The saved search returned no results.
Details:
DataSourceKind=Odbc
DataSourcePath=dsn=Splunk ODBC
OdbcErrors=[Table]

I do not see find my data or field extractions from Splunk. Any ideas?

Re: How do I access data in Splunk via PowerBi?

richgalloway — Tue, 09 May 2023 17:24:02 GMT

Sometimes it's normal for a search to return no results. It may be that there is no data that meets the search criteria. This is especially true for searches that look for error conditions.

Have you tried running the search within Splunk to see what it returns?

Re: How do I access data in Splunk via PowerBi?

hgarnica — Tue, 09 May 2023 17:35:55 GMT

You were correct, my search report needed modification in Splunk. Thereafter I was able to see the Table in PowerBi that was named the same as my Saved Search Report.

Thanks again, Hector

Re: How do I access data in Splunk via PowerBi?

srinivasmanikan — Tue, 08 Oct 2024 11:55:01 GMT

Hey hgarnica,

i have the same issue, like i was not able to run the search from powerbi, what type of modifications or permissions i need to provide and how will be the sample url for connecting the splunk as i was using it with https://hostname:8089 --> do we need to give any specific app names like that.

Thanks in-advance for awaiting for your response.