Getting Data In

Splunk Unity JDBC Connect not working

kkrishnan_splun
Splunk Employee
Splunk Employee

I am trying to use the Unity JDBC Driver for splunk : http://unityjdbc.com/splunk/splunk_jdbc.php
But I keep receiving the message that it found no tables. The documentation is not detailed enough to provide information about the setup from Splunk's side. Is there some jar file that needs to be added to $SPLUNK_HOME/etc/apps/dbx/bin/lib database_types.conf file ?

Tags (3)
0 Karma

umlawren
Explorer

You will want to make sure as part of the JDBC URL that you include the parameter tables=.* to retrieve all saved searches. Example: jdbc:splunk://localhost:8089?tables=.*

The ".*" is a Java RegEx match, so if you wanted to match all saved searches starting with N you would write tables=N.*.

More info on the Splunk JDBC driver including setup instructions are available.

0 Karma

vishaltaneja070
Motivator

you are using it for which database?

0 Karma

kkrishnan_splun
Splunk Employee
Splunk Employee

For postgreSQL

0 Karma

vishaltaneja070
Motivator

if you are using it with Db connect, then splunk direct database driver is available which can help you out better.
Try this:
https://jdbc.postgresql.org/

I have already tried this and working great with Splunk.

0 Karma
Get Updates on the Splunk Community!

Infographic provides the TL;DR for the 2023 Splunk Career Impact Report

We’ve been shouting it from the rooftops! The findings from the 2023 Splunk Career Impact Report showing that ...

Splunk Lantern | Getting Started with Edge Processor, Machine Learning Toolkit ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...