Splunk Search

How to use Splunk ODBC driver to import an excel report to splunk?

sara91
Explorer

Hi All,

I want to import a scheduled excel report generated from one prod system to splunk. When I manually imported it, it showed me encoded as shown below

alt text

I read through few answers to similar query, and found that splunk doesnot support xls foramt. Splunk can upload only text based format file. Then I came across, splunk ODBC driver, in the blog "Excelling with excel in splunk" (link below).

https://www.splunk.com/blog/2016/02/15/excelling-with-excel-in-splunk.html

The blog states that "..... Splunk enables you to connect Excel directly to Splunk with the ODBC Connector for Windows, as well as enabling you to export with outputcsv a csv file. Dominique from Helvetia Insurance has developed a Splunk TA that is freely available on Splunkbase which allows you to import, export and e-mail data in XLS format..... "

But then I did not find qny relevant document which explains "how to import excel sheet using this driver" except the link below to "use it with microsoft excel"
https://docs.splunk.com/Documentation/ODBC/2.1.1/UseODBC/MicrosoftExcel

Is there any relevant document for the same or any other method to analyse the excel reports in splunk?

0 Karma
1 Solution

HiroshiSatoh
Champion

"ODBC connection" is a function to access Splunk data from Excel. It is not a function to import into Splunk.
It is common to convert to CSV and import.

Although it may be possible to import with "SPLUNK-> DB CONNECT-> JDBC-> ODBC-> EXCEL", I don't do it because it's cumbersome.

View solution in original post

0 Karma

HiroshiSatoh
Champion

"ODBC connection" is a function to access Splunk data from Excel. It is not a function to import into Splunk.
It is common to convert to CSV and import.

Although it may be possible to import with "SPLUNK-> DB CONNECT-> JDBC-> ODBC-> EXCEL", I don't do it because it's cumbersome.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...