https://community.splunk.com/t5/Splunk-Search/Splunk-logs-in-RedShift/m-p/474039#M192428 <P>Thanks, I was also thinking the same but wanted more clarity before I shoot up the email on this solution.</P> Wed, 08 Apr 2020 21:47:29 GMT ashishsecdev 2020-04-08T21:47:29Z https://community.splunk.com/t5/Splunk-Search/Splunk-logs-in-RedShift/m-p/474037#M192426 <P>Hi All,</P> <P>I am trying to use RedShift to store all my Splunk logs, it it possible? </P> Wed, 08 Apr 2020 19:51:23 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-logs-in-RedShift/m-p/474037#M192426 ashishsecdev 2020-04-08T19:51:23Z https://community.splunk.com/t5/Splunk-Search/Splunk-logs-in-RedShift/m-p/474038#M192427 <P>I'm going to say "no", without any official source to back that up. However, Splunk is not a traditional "big data" product, doesn't store it's data in a standard format, and doesn't use SQL to query data. All of those things would seem to disqualify Redshift.</P> Wed, 08 Apr 2020 21:13:55 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-logs-in-RedShift/m-p/474038#M192427 richgalloway 2020-04-08T21:13:55Z https://community.splunk.com/t5/Splunk-Search/Splunk-logs-in-RedShift/m-p/474039#M192428 <P>Thanks, I was also thinking the same but wanted more clarity before I shoot up the email on this solution.</P> Wed, 08 Apr 2020 21:47:29 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-logs-in-RedShift/m-p/474039#M192428 ashishsecdev 2020-04-08T21:47:29Z https://community.splunk.com/t5/Splunk-Search/Splunk-logs-in-RedShift/m-p/474040#M192429 <P>@richgalloway Check this out, do you think it would be full fledged solution?</P> <P><A href="https://fivetran.com/directory/splunk/amazon-redshift">https://fivetran.com/directory/splunk/amazon-redshift</A></P> Wed, 08 Apr 2020 21:56:25 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-logs-in-RedShift/m-p/474040#M192429 ashishsecdev 2020-04-08T21:56:25Z https://community.splunk.com/t5/Splunk-Search/Splunk-logs-in-RedShift/m-p/474041#M192430 <P>As I read it, Fivetran merely copies Splunk data into Redshift. I don't see where Splunk can use the Redshift data. Consider using the free trial to see how it works, but understand that Splunk probably will not support you.</P> Thu, 09 Apr 2020 12:36:59 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-logs-in-RedShift/m-p/474041#M192430 richgalloway 2020-04-09T12:36:59Z https://community.splunk.com/t5/Splunk-Search/Splunk-logs-in-RedShift/m-p/474042#M192431 <P>@richgalloway thanks for you response. Understood, I think we will rater go for some other solution and not RedShift.</P> Thu, 09 Apr 2020 12:44:47 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-logs-in-RedShift/m-p/474042#M192431 ashishsecdev 2020-04-09T12:44:47Z