Splunk Search

Splunk reading data from Microsoft SQL database

raghu_vaidya
Explorer

Hi, Can splunk read data from Microsoft SQL Server 2008? We have an application which logs business exceptions to SQL database, currently we have a customized dashboard which shows these exceptions to business users, we are considering to use Splunk for all kinds of exceptions including business exceptions, is there a way to display SQL data (business exceptions) using Splunk.

Thanks, -Wiz

Tags (2)
1 Solution

dwaddle
SplunkTrust
SplunkTrust

Directly, no. Splunk does not have any native interface to an SQL database of any kind. The supported method for doing this is with a 'scripted input' where Splunk periodically runs a shell script of your design and indexes its output. That shell script is free to connect to a database and extract whatever data it desires.

There are some add-on apps in Splunkbase that provide examples / implementations of this scripted input. The first one I found was http://splunk-base.splunk.com/apps/27105/jdbc-scripted-input . I have not tried it, and don't know if it will work for your purpose or not.

View solution in original post

ChrisG
Splunk Employee
Splunk Employee

You can also use the Splunk MySQL Connector app to define lookups to query tables in MySQL databases. See About Splunk MySQL Connector for more information. The app is available on Splunkbase.

0 Karma

dwaddle
SplunkTrust
SplunkTrust

Directly, no. Splunk does not have any native interface to an SQL database of any kind. The supported method for doing this is with a 'scripted input' where Splunk periodically runs a shell script of your design and indexes its output. That shell script is free to connect to a database and extract whatever data it desires.

There are some add-on apps in Splunkbase that provide examples / implementations of this scripted input. The first one I found was http://splunk-base.splunk.com/apps/27105/jdbc-scripted-input . I have not tried it, and don't know if it will work for your purpose or not.

dwaddle
SplunkTrust
SplunkTrust

Can you give an update?

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Enhance Security Operations with Automated Threat Analysis in the Splunk EcosystemAre you leveraging ...

What Is Splunk? Here’s What You Can Do with Splunk

Hey Splunk Community, we know you know Splunk. You likely leverage its unparalleled ability to ingest, index, ...

Level Up Your .conf25: Splunk Arcade Comes to Boston

With .conf25 right around the corner in Boston, there’s a lot to look forward to — inspiring keynotes, ...