Splunk to take in data from MySQL

[jaterlwj]

Is there any possible way for Splunk to - let's say, read/indexes data directly from a MySQL database table?

I have tried Splunk MySQL Connector but what it seems to do is basically creating a lookup for existing fields. Assuming that I have no existing fields and everything is on the database. What can I do?

[losciamano · Accepted solution]

If you have MySQL connector installed, the following command can be used to directly query MySQL server:

| mysqlquery username="your_username" password="your_password" host="server_ip_address" port="server_port" schema="your_db_name" query="your_sql_query"

This operation is possible because the developer of MySQL connector wrapper communication with MySQL server with this command.
Hope this helps

[jaterlwj]

Thanks for your reply! This helps me. 🙂

[Takajian]

Splunk can index any data with text format, not binary format. You will need script to collect data of relational database like MySQL. Following app can be helpful to collect data from MySQL, but you will need to customize it according to your requirement.

http://splunk-base.splunk.com/apps/41769/splunk-mysql-monitor