Splunk DB Connect: is this possible to add/update ... - Splunk Community

Getting Data In

I am planning to use DB-connect in my workflow. Right now all our lookups lie on SH nodes.

I want to add/update processed data to DB from SH nodes (in a clustered env) . Is this possible to do so using dbxoutput command ?

NOTE :processed data is created from some intermediate lookups which lie on SH nodes

Hi @pargupta1234,

yes it's possible using DB-Connect and giving the correct grants to the user.: you can run all the queries you want, also add/update quesries.

But put very much attention to this because it isn't a security best practice!

I usually avoid to give add/update grants to Splunk users.

Ciao.

Giuseppe

Get Updates on the Splunk Community!

Thanks for the Memories: .conf26 Took Learning to New Heights

Thank you, Splunk Community, for making .conf26 in Denver one for the books. From packed Splunk University ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Splunk Auto Ingestion Parallel Pipeline Scaling

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...