Getting Data In

post DB query output and logs Splunk HEC

kpavan
Path Finder

Hi All,

Need assistance, I have requirement to send Oracle DB query output data/logs to Splunk HEC and some of the log files also need to be sent to HEC. Could you please let me know how can we achieve this?

Thanks!
Pavan

Tags (1)
0 Karma

poete
Builder

Hello @kpavan,

If you want to use HEC, this probably means you want to send the lines of the log files as input through http.
First, if not already done, read carefully the following documentation:
http://docs.splunk.com/Documentation/Splunk/latest/Data/AboutHEC

Basically, using HEC would mean setting up a process to parse the log files, detect the new lines and send the content of these lines to Splunk, once the input is created in Splunk, of course.

I hope this helps

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Why use HEC when DB Connect is purpose-built to query SQL databases and index the output?

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability As businesses scale ...