Getting Data In

Is there an Integration between Spark and Splunk?

mhsilva
Explorer

Hello everyone,

I want to integrate Spark and Splunk, using Spark to process searches faster.

With Splunk Analytics for Hadoop, I can set a HDFS as a Virtual Indexer, but this uses a Hadoop/MapReduce to get data. How can I use Spark instead of? Thanks everyone

Ps: i tried to sign up and get Splunk MLTK Connector for Apache Spark, but apparently, there are no vacancies.

0 Karma

ddrillic
Ultra Champion

Right, that was the basic design -

-- With Splunk Analytics for Hadoop, i can set a hdfs as a Virtual Indexer, but this uses a Hadoop/MapReduce to get data

I wonder if the product has evolved... @rdagan_splunk can shed light on this topic.

mhsilva
Explorer

Thank you for this, but these solutions propose using spark only to process data, but still use Splunk Analytics
for Hadoop to search the data, so it still use MapReduce, or not?
Thanks again

0 Karma

rdagan_splunk
Splunk Employee
Splunk Employee

Hi, these solutions actually used Splunk DB Connect with JDBC to talk to Spark SQL

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!