Splunk Dev

what is the best way to have a local database inside a splunk app?

RiccardoV
Communicator

Hi,
I'm triying to create a little local database inside an app i'm developing for Splunk.
I have to redistribute that app, so the app must be stand-alone and must contains the db inside it.
I tried to use sqlite but I noticed that sqlite3 is not shipped inside splunk.

The only way I found right now is to use a csv file, but it hasn't great performance!

Do you have any suggestion?

Thanks!

1 Solution

musskopf
Builder

Have a look on a solution I found to use sqlite3 inside python lookup scripts:

http://answers.splunk.com/answers/109009/splunk6-django-app-importing-sqlite

View solution in original post

musskopf
Builder

Have a look on a solution I found to use sqlite3 inside python lookup scripts:

http://answers.splunk.com/answers/109009/splunk6-django-app-importing-sqlite

yannK
Splunk Employee
Splunk Employee

You could use a real database outide of splunk, see the bdconnect app.

RiccardoV
Communicator

I have to develop a redistributable app, so it has to be "stand-alone", with its own db inside!

0 Karma

yannK
Splunk Employee
Splunk Employee

Actually, this is more for search language.
it may not work for your python scripting.

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...