Splunk SQL query

[rahul2gupta]

Hi @gcusello ,

Is it possible to run a SQL query from Splunk search bar to a SQL server? i.e. I want to run a SQL query against server abc1sql07.

Is this possible ? if so, what permission do we need to setup on SQL server to ensure Splunk has permission to query the database?

Regards,

Rahul

[anilchaithu]

@rahul2gupta 

It is possible to query database from Splunk.

• You need read permissions to the database.
• You need to install splunk app for dbconnect on splunk

The syntax to run this query is

| dbxquery connection="connection_name" query="select ...."

Hope this helps