All Apps and Add-ons

How to Pull SQL data into Splunk

bcusick
Communicator

Hi,

I am trying to pull data from a MSSQLSERVER table that updates in real time. This is a remote source. From my research I believe I will have to put a script in my input files. If someone could point me in the right direction it would be greatly appreciated!

This will have to be done without the use of Splunk's log forwarders...I am running Splunk 5.0.4.

-Brian

Tags (2)
0 Karma
1 Solution

ChrisG
Splunk Employee
Splunk Employee

Have you looked at the Splunk DB Connect app? Are you unable to use any forwarding at all?

View solution in original post

ChrisG
Splunk Employee
Splunk Employee

Have you looked at the Splunk DB Connect app? Are you unable to use any forwarding at all?

gauravp
New Member

Unfortunately only works with enterprise version.. How about splunk light?

0 Karma

bcusick
Communicator

Thank you!

0 Karma

ChrisG
Splunk Employee
Splunk Employee

From the very next topic in the documentation (http://docs.splunk.com/Documentation/DBX/1.1.1/DeployDBX/Configuredatabasemonitoring): "A Database input lets you fetch and index data from a SQL database. Unlike other input sources, database inputs are retrieved periodically by the DBmon scheduler."

0 Karma

bcusick
Communicator

Thanks Chris. One last question which I could not find a specific answer on...would this require putting any sort of forwarder on the database server? Or is Splunk strictly just running a query against a connected database?

0 Karma

ChrisG
Splunk Employee
Splunk Employee
0 Karma

bcusick
Communicator

Unfortunately for compliance reasons, I don't believe I'm allowed to install anything on these machines. After research-with splunk DB connect, can I connect to a db on a remote server and just query the DB, pulling the data into Splunk? That would be perfect.

0 Karma
Get Updates on the Splunk Community!

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...

Edge Processor Scaling, Energy & Manufacturing Use Cases, and More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...