My data primarily resides on Hadoop. I want to use Splunk for basic computations/ correlations, e.g : Aggregations / Sessionization and push the data back to Hadoop, where there would be further more complicated business logic applied on top of the moved data and the result stored back in Hadoop, which will eventually get indexed back in Splunk for query / reporting purpose.
To reliably do this, I need some orchestration of the sequence of these activities. E.g : (1) For a specific time segment, trigger the Report Acceleration/Summary Index. (2) Move the data to Hadoop (3) Run the MR job on the new data. (4) Index the result in Splunk.
Is their some oozie sort of integration with splunk that will let me orchestrate between splunk and hadoop jobs?
