Installation

Installing DB Connect on SH

tnyinzer
Observer

I am you planning to use DB Connect for a data enrichment (I want to create a lookup using dbxquery for a dymanic dataset that needs to be constantly updated to use at search time). We already have DB Connect on our HFs, but for the input of data from DBs. I want to install DBconnect on our search head just for the purpose of data enrichment of this one lookup table. 

I have seen a couple answers online about how this could/would work and that it is fine just as long as it is for data enrichment, but I was hoping for a little more guidance or advice on people's thoughts related to this. I have thought about external lookups and onboarding the data, but this just seems like the easiest and most streamlined way to do this. 

Thanks in advance!  

Labels (2)
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...

In cybersecurity, defenders respond to threats. Architects design the systems that stop them.    As ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...