Connect Splunk (hosted on premise) to Database (hosted on AWS cloud) using Splunk DB Connect

[pahujadeep]

Any suggestion on approach to connect Splunk (hosted on prem) to Database (hosted on AWS cloud) using Splunk DB Connect. Is this achievable in any manner?

[isoutamo]

Is this database managed by AWS you your organisation?

If it's managed by you then just install DBX to that host and configure those input there. Of course it that database has HA on place or it's as a service from AWS then you should set up additional Heavy Forwarder where you install DBX and configure needed inputs there.

Then if you are using dbxquery within SPL (e.g alerts) then you should also install DBX to your SH layer nodes.

r. Ismo