Hi Mike,
Most Splunk solutions that get data from an SQL database require a scripted input on Splunk. Basically, Splunk runs your program which does whatever it does to get the data you want. The program's output is then stored into Splunk as one or more events, depending on how you configure it.
One of the trickiest parts is maintaining state of what you've already "extracted" from the database so you don't have duplicate Splunk events.
