Getting Data In

post DB query output and logs Splunk HEC

kpavan
Path Finder

Hi All,

Need assistance, I have requirement to send Oracle DB query output data/logs to Splunk HEC and some of the log files also need to be sent to HEC. Could you please let me know how can we achieve this?

Thanks!
Pavan

Tags (1)
0 Karma

poete
Builder

Hello @kpavan,

If you want to use HEC, this probably means you want to send the lines of the log files as input through http.
First, if not already done, read carefully the following documentation:
http://docs.splunk.com/Documentation/Splunk/latest/Data/AboutHEC

Basically, using HEC would mean setting up a process to parse the log files, detect the new lines and send the content of these lines to Splunk, once the input is created in Splunk, of course.

I hope this helps

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Why use HEC when DB Connect is purpose-built to query SQL databases and index the output?

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...