Getting Data In

Splunk Unity JDBC Connect not working

kkrishnan_splun
Splunk Employee
Splunk Employee

I am trying to use the Unity JDBC Driver for splunk : http://unityjdbc.com/splunk/splunk_jdbc.php
But I keep receiving the message that it found no tables. The documentation is not detailed enough to provide information about the setup from Splunk's side. Is there some jar file that needs to be added to $SPLUNK_HOME/etc/apps/dbx/bin/lib database_types.conf file ?

Tags (3)
0 Karma

umlawren
Explorer

You will want to make sure as part of the JDBC URL that you include the parameter tables=.* to retrieve all saved searches. Example: jdbc:splunk://localhost:8089?tables=.*

The ".*" is a Java RegEx match, so if you wanted to match all saved searches starting with N you would write tables=N.*.

More info on the Splunk JDBC driver including setup instructions are available.

0 Karma

vishaltaneja070
Motivator

you are using it for which database?

0 Karma

kkrishnan_splun
Splunk Employee
Splunk Employee

For postgreSQL

0 Karma

vishaltaneja070
Motivator

if you are using it with Db connect, then splunk direct database driver is available which can help you out better.
Try this:
https://jdbc.postgresql.org/

I have already tried this and working great with Splunk.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Laser Bananas and Edge Hubs: Exploring Operational Technology (OT) Data Through a ...

  OT is a different environment to traditional IT and can have interesting challenges when interfacing the ...

Event Series: Mastering AI Tokenomics and Splunk Agent Observability

Beyond the Black Box: Correlating AI Performance and Tokenomics with Splunk Agent Observability   As ...

span_metrics: The OpenTelemetry-Idiomatic Way to See Inside Your Services

You open a trace in Splunk Observability Cloud and everything looks fine. One root span, order-pipeline, with ...