Archive
Highlighted

Getting Data from Database's

Contributor

Hi
How to get data from database without using Splunk DBConnect.?

Any help is appreciated.

Cheers.

Highlighted

Re: Getting Data from Database's

Legend

DB Connect IS how you would get data from databases with Splunk. Can you tell us more about why you can't use it?

Highlighted

Re: Getting Data from Database's

Contributor

My company does not want any additional apps/software so exploring my options to access Database data in Splunk.

0 Karma
Highlighted

Re: Getting Data from Database's

Splunk Employee
Splunk Employee

If you don't want to use DB connect you will have to build your own scripted or modular input - essentially you would have to reimplement DB Connect.

Highlighted

Re: Getting Data from Database's

Contributor

You mean i need to write a script which queries the DB and saves the results into a text file which can be supplied to Splunk for indexing.

0 Karma
Highlighted

Re: Getting Data from Database's

SplunkTrust
SplunkTrust

Before DB Connect existed, we wrote Java programs to read data from databases. Those programs are still used. The programs are launched by a shell script as a Splunk scripted input and anything the program writes to stdout is indexed by Splunk so there's no need for a text file. Of course, your program could be written in python or perl or anything you like.

Our Java programs seem to be able to handle more complex queries than DB Connect. The programs also transform some data before passing it to Splunk - something DB Connect cannot do.

---
If this reply helps you, an upvote would be appreciated.

View solution in original post

Highlighted

Re: Getting Data from Database's

Contributor

Hi thanks for the info.
Is there any link where i can refer the java code that you are mentioning.

0 Karma
Highlighted

Re: Getting Data from Database's

SplunkTrust
SplunkTrust

Sorry, but I'm not allowed to share our code. It's pretty basic stuff, though, using standard Java SQL classes to send a query and retrieve the results.

---
If this reply helps you, an upvote would be appreciated.