All Apps and Add-ons

How to Pull SQL data into Splunk

bcusick
Communicator

Hi,

I am trying to pull data from a MSSQLSERVER table that updates in real time. This is a remote source. From my research I believe I will have to put a script in my input files. If someone could point me in the right direction it would be greatly appreciated!

This will have to be done without the use of Splunk's log forwarders...I am running Splunk 5.0.4.

-Brian

Tags (2)
0 Karma
1 Solution

ChrisG
Splunk Employee
Splunk Employee

Have you looked at the Splunk DB Connect app? Are you unable to use any forwarding at all?

View solution in original post

ChrisG
Splunk Employee
Splunk Employee

Have you looked at the Splunk DB Connect app? Are you unable to use any forwarding at all?

gauravp
New Member

Unfortunately only works with enterprise version.. How about splunk light?

0 Karma

bcusick
Communicator

Thank you!

0 Karma

ChrisG
Splunk Employee
Splunk Employee

From the very next topic in the documentation (http://docs.splunk.com/Documentation/DBX/1.1.1/DeployDBX/Configuredatabasemonitoring): "A Database input lets you fetch and index data from a SQL database. Unlike other input sources, database inputs are retrieved periodically by the DBmon scheduler."

0 Karma

bcusick
Communicator

Thanks Chris. One last question which I could not find a specific answer on...would this require putting any sort of forwarder on the database server? Or is Splunk strictly just running a query against a connected database?

0 Karma

ChrisG
Splunk Employee
Splunk Employee
0 Karma

bcusick
Communicator

Unfortunately for compliance reasons, I don't believe I'm allowed to install anything on these machines. After research-with splunk DB connect, can I connect to a db on a remote server and just query the DB, pulling the data into Splunk? That would be perfect.

0 Karma
Get Updates on the Splunk Community!

New Release | Splunk Enterprise 9.3

Admins and Analyst can benefit from:  Seamlessly route data to your local file system to save on storage ...

2024 Splunk Career Impact Survey | Earn a $20 gift card for participating!

Hear ye, hear ye! The time has come again for Splunk's annual Career Impact Survey!  We need your help by ...

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...