splunk DB connect with splunk cloud

[santosh11]

I want to perform db connect between oracle and splunk. Please let me know how can we do that?

Regards,
Santosh

[gcusello]

Hi santosh11,
if you're using Splunk Cloud, surely you're using at least two (or more) Heavy Forwarders to concentrate logs to send to Splunk Cloud.

So you can use a dedicated Heavy Forwarder to install DB-Connect App following the instructions in Splunk documentation https://docs.splunk.com/Documentation/DBX/3.1.4/DeployDBX/AboutSplunkDBConnect.
If you have few logs, you can use one of the Heavy Forwarders used as concentrators, but this depends on the volume of logs.
Using this Heavy Forwarder, you can access your Oracle DB Server and extract the data you need.

Bye.
Giuseppe

[santosh11]

Hello Gcusello,

I have successfully pushed data from Oracle to Splunk cloud using Splunk DB connect. Now i want to push the data back. I.E. from Splunk index data to oracle db through DB connect.

I have pushed data to Oracle DB from Splunk DB connect which is in HF. But how will we do that from Splunk Cloud Index data?

Regards,
Santosh

[skrajkumar_splu]

Hey Santosh,

The best recommended solution is to connect the DB via HF. By this way you can eradicate below challenges

1. It helps in security. You need not risk in exposing your DB to internet, also you need not trouble yourself with port openings.
2. At time SQL queries may yield huge datasets, depending on your bandwidth it may slowdown your network.

So its better to install DB Connect in your Local HF( As you usually configure in Splunk enterprise) and forward its data to the cloud.

Hope this helps.

,

[santosh11]

Hello skrajkumar,

I have successfully pushed data from Oracle to Splunk cloud using Splunk DB connect via HF. Now i want to push the data back. I.E. from Splunk index data to oracle db through DB connect via HF.

I have pushed data to Oracle DB from Splunk DB connect which is in HF. But how will we do that from Splunk Cloud Index data?

Regards,
Santosh