Best way to index SQLite DB file?

j666gak · ‎08-23-2012

Hello,

I need to index a SQLite DB file. However when I tell Splunk to monitor the file and I look at the indexed data it is all 0's or binary. The application that creates and updates the DB does not have an option to export the data.

Am I missing something? any ideas?

Cheers

ziegfried · ‎08-24-2012

DBX allows you to do that. It's possible to setup a database monitor on a sqlite database and index new records, when the database is updated.

It's a commercial extension, though.

Best way to index SQLite DB file?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Thanks for the Memories: .conf26 Took Learning to New Heights

Best Practices: Splunk auto adjust pipeline queue

Splunk Auto Ingestion Parallel Pipeline Scaling

Join the Conversation

Best way to index SQLite DB file?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Thanks for the Memories: .conf26 Took Learning to New Heights

Best Practices: Splunk auto adjust pipeline queue

Splunk Auto Ingestion Parallel Pipeline Scaling