All Apps and Add-ons

How to use Splunk to search values pulled from an Oracle DB table?


Hi all. I have a table in our application database that records when reports are generated. It includes great info such as the report type, the duration the report took, start/end, parameters, etc.

I'd love to have Splunk generate some sort of timechart on the different report types, or perhaps even a way to see how many concurrent reports are being generated. My question is, how can I have splunk query the db (as it does any normal file) for this information? Is it possible?

Thank you, it may be a dumb question but I'm trying 🙂

0 Karma


The Log File Analysis for Oracle 11g add-on paper describes step-by-step exactly how to do what you're talking about. Using the "dbquery" command from the DB Connect app, you can generate all the reports you're talking about, without affecting your Splunk license. A report query would look something like this:

| dbquery "oradb" "select to_char(report_date,'DD-MON-YYYY HH24:MI:SS'), report_type from report_log" | timechart count by report_type
0 Karma


Probably the easiest way would be to install and use the Splunk DB Connect app. With it, you can connect to and index your Oracle tables or just run SQL queries on them within Splunk. The documentation for DB Connect is here. Good luck!

Get Updates on the Splunk Community!

Dashboard Studio Challenge - Learn New Tricks, Showcase Your Skills, and Win Prizes!

Reimagine what you can do with your dashboards. Dashboard Studio is Splunk’s newest dashboard builder to ...

Introducing Edge Processor: Next Gen Data Transformation

We get it - not only can it take a lot of time, money and resources to get data into Splunk, but it also takes ...

Take the 2021 Splunk Career Survey for $50 in Amazon Cash

Help us learn about how Splunk has impacted your career by taking the 2021 Splunk Career Survey. Last year’s ...