post DB query output and logs Splunk HEC

[kpavan]

Hi All,

Need assistance, I have requirement to send Oracle DB query output data/logs to Splunk HEC and some of the log files also need to be sent to HEC. Could you please let me know how can we achieve this?

Thanks!
Pavan

[poete]

Hello @kpavan,

If you want to use HEC, this probably means you want to send the lines of the log files as input through http.
First, if not already done, read carefully the following documentation:
http://docs.splunk.com/Documentation/Splunk/latest/Data/AboutHEC

Basically, using HEC would mean setting up a process to parse the log files, detect the new lines and send the content of these lines to Splunk, once the input is created in Splunk, of course.

I hope this helps

[richgalloway]

Why use HEC when DB Connect is purpose-built to query SQL databases and index the output?