Getting Data In

post DB query output and logs Splunk HEC

Path Finder

Hi All,

Need assistance, I have requirement to send Oracle DB query output data/logs to Splunk HEC and some of the log files also need to be sent to HEC. Could you please let me know how can we achieve this?


Tags (1)
0 Karma


Hello @kpavan,

If you want to use HEC, this probably means you want to send the lines of the log files as input through http.
First, if not already done, read carefully the following documentation:

Basically, using HEC would mean setting up a process to parse the log files, detect the new lines and send the content of these lines to Splunk, once the input is created in Splunk, of course.

I hope this helps

0 Karma


Why use HEC when DB Connect is purpose-built to query SQL databases and index the output?

If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...

Announcing the 1st Round Champion’s Tribute Winners of the Great Resilience Quest

We are happy to announce the 20 lucky questers who are selected to be the first round of Champion's Tribute ...

We’ve Got Education Validation!

Are you feeling it? All the career-boosting benefits of up-skilling with Splunk? It’s not just a feeling, it's ...