Splunk Dev

what is the best way to have a local database inside a splunk app?

RiccardoV
Communicator

Hi,
I'm triying to create a little local database inside an app i'm developing for Splunk.
I have to redistribute that app, so the app must be stand-alone and must contains the db inside it.
I tried to use sqlite but I noticed that sqlite3 is not shipped inside splunk.

The only way I found right now is to use a csv file, but it hasn't great performance!

Do you have any suggestion?

Thanks!

1 Solution

musskopf
Builder

Have a look on a solution I found to use sqlite3 inside python lookup scripts:

http://answers.splunk.com/answers/109009/splunk6-django-app-importing-sqlite

View solution in original post

musskopf
Builder

Have a look on a solution I found to use sqlite3 inside python lookup scripts:

http://answers.splunk.com/answers/109009/splunk6-django-app-importing-sqlite

yannK
Splunk Employee
Splunk Employee

You could use a real database outide of splunk, see the bdconnect app.

RiccardoV
Communicator

I have to develop a redistributable app, so it has to be "stand-alone", with its own db inside!

0 Karma

yannK
Splunk Employee
Splunk Employee

Actually, this is more for search language.
it may not work for your python scripting.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...