Getting Data In

Forwarding data from Splunk to some other exernal SQL server !

Path Finder

Hello Team ,

we have some requirement to send data to externally hosted SQL server not all but some fields data captured from different log sources should be forwarded for display in portal for some sort of mgmt reporting
for eg :- if we have email security logs integrated in splunk some fields required would be

and may be from firewall these all fields inputs
Threat/Content Type
Threat/Content Name

and from Vulnerability Mgmt these fileds
Asset IP Address
Asset Names
Site Name
Asset OS Name

These are just example inputs fields which may be considered . I am bit puzzled how can we do this to effectively send only required and limited data from splunk to SQL server

Tags (1)
0 Karma

Ultra Champion

Take a look at DB Connect:

Get the app here:

If my comment helps, please give it a thumbs up!
0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...