Connecting Splunk with Power bi

[Sabahat]

I am finally successful in connecting Splunk with Power BI. But while adding a new source and getting data in Power BI, the data models I see are different from those I see in the Splunk datasets tab's interface and I also do not find the table view I created in Splunk.

[Sabahat]

This gets resolved somehow. Now I am trying to connect the remote desktop (my peer's Splunk with my power bi) to do a POC. I almost tried everything but I am unable to connect with other Splunk. I can only connect with my own.  @ashvinpandey  Sir, can you please guide me?

[isoutamo]

Hi

Have you read this https://conf.splunk.com/files/2022/slides/PLA1122B.pdf ?

I suppose that you can contact Mary in Splunk UG Slack if you are needing some help?

r. Ismo

[PickleRick]

OK. First things first.

What did you do to "connect Splunk with Power BI"? Are you ingesting data from Power BI into Splunk? (how?) or are you getting the data from Splunk into PowerBI? (again - how?).

[Sabahat]

I am trying to get the data from Splunk into PowerBI. For that, I made a connection between Splunk and Power BI through the Splunk ODBC driver.

[PickleRick]

And what are you "pulling" from Splunk? Honest question, I have no idea how Splunk ODBC driver works - do you define a search being your data source globally or do you define one every time you call that data source?

[Sabahat]

I am trying to pull the datasets from Splunk into my Power bi desktop to analyze it. yeah I am fetching it for global search.

[PickleRick]

OK. If you're using ODBC for Splunk, it executes a saved search and pulls its results into your tool (whatever it is - PowerBI, Excel, anything else).

So it's completely independent from the datamodels defined on Splunk's side. So it's up to you to prepare a saved search on Splunk side that will produce the data you'll be pulling with the ODBC driver.