How to run a DBX Query from SplunkCloud?

[markhvesta]

I am regularly running queries to ingest DB data from Heavy forwarders, but is there a way to run ad-hoc DBX searches from the SplunkCloud search head?  It doesn't seem to either recognize the connection or it returns no results when I attempt with a connection that exists in the Heavy forwarder

[richgalloway]

If you're on a Victoria stack then you may be able to run DBX on your Splunk Cloud search head.  It cannot be run on a Classic stack.

Making DBX queries from Splunk Cloud may not work properly, however, since it's unlikely your SQL database allows connections from the Internet (which it would need to do to for Splunk Cloud to query it).

[markhvesta]

If the SQL DB does allow the connections, will the SplunkCloud search head recognize the connections that are configured in the forwarders in a DBX query?

[richgalloway]

Splunk Cloud has no visibility into your forwarders nor do the forwarders sync their configurations with Splunk Cloud instances.  You will have to re-create the connections and inputs on the Cloud SH.