All Apps and Add-ons

How to Pull SQL data into Splunk

bcusick
Communicator

Hi,

I am trying to pull data from a MSSQLSERVER table that updates in real time. This is a remote source. From my research I believe I will have to put a script in my input files. If someone could point me in the right direction it would be greatly appreciated!

This will have to be done without the use of Splunk's log forwarders...I am running Splunk 5.0.4.

-Brian

Tags (2)
0 Karma
1 Solution

ChrisG
Splunk Employee
Splunk Employee

Have you looked at the Splunk DB Connect app? Are you unable to use any forwarding at all?

View solution in original post

ChrisG
Splunk Employee
Splunk Employee

Have you looked at the Splunk DB Connect app? Are you unable to use any forwarding at all?

gauravp
New Member

Unfortunately only works with enterprise version.. How about splunk light?

0 Karma

bcusick
Communicator

Thank you!

0 Karma

ChrisG
Splunk Employee
Splunk Employee

From the very next topic in the documentation (http://docs.splunk.com/Documentation/DBX/1.1.1/DeployDBX/Configuredatabasemonitoring): "A Database input lets you fetch and index data from a SQL database. Unlike other input sources, database inputs are retrieved periodically by the DBmon scheduler."

0 Karma

bcusick
Communicator

Thanks Chris. One last question which I could not find a specific answer on...would this require putting any sort of forwarder on the database server? Or is Splunk strictly just running a query against a connected database?

0 Karma

ChrisG
Splunk Employee
Splunk Employee
0 Karma

bcusick
Communicator

Unfortunately for compliance reasons, I don't believe I'm allowed to install anything on these machines. After research-with splunk DB connect, can I connect to a db on a remote server and just query the DB, pulling the data into Splunk? That would be perfect.

0 Karma
Get Updates on the Splunk Community!

Security Professional: Sharpen Your Defenses with These .conf25 Sessions

Sooooooooooo, guess what. .conf25 is almost here, and if you're on the Security Learning Path, this is your ...

First Steps with Splunk SOAR

Our first step was to gather a list of the playbooks we wanted and to sort them by priority.  Once this list ...

How To Build a Self-Service Observability Practice with Splunk Observability Cloud

If you’ve read our previous post on self-service observability, you already know what it is and why it ...