I am trying to connect Tableau to a Splunk instance. I know almost nothing about Splunk and am hoping some folks have had experience with this. My understanding, from the documentation, is that we have to first create some saved searches in Splunk. I've done that. My expectation was that, when I connect to Splunk in Tableau, it should then show me those saved searches as "tables". But when I connect, it just shows a blank screen. Any idea what I'm doing wrong?
Thanks for the quick response! I actually created the saved search myself (with my own login) then used that same login for Tableau, so I'd assume I have access (I also fiddled with the security to make it available to more than just me). And the saved search was just a very simple table of columnar data.
And you're not getting any connection errors? It's been a while, but I recall the ODBC driver choking on Splunk messages (not errors, not relevant, but apparently show-stopping). Do you see your Tableau activity in _internal?
I was able to work with one of my Tableau users today, and found something interesting. Tables aren't showing up for him, either, but he's able to use the browse function (top-right of the page) to find them. See anything using that route?
Sidenote: We have a convention of prepending these report names with "Exportable Data - " to differentiate reports intended for Tableau use from those that may not work in Tableau.