Splunk Tech Talks
Deep-dives for technical practitioners.

Visualize Splunk data in your favorite BI Tool

Splunk Employee
Splunk Employee

View our Splunk Tech Talk, Visualize Splunk Data in your Favorite BI Tool, featuring the ODBC Driver to empower all users to quickly create executive facing visualizations using Splunk data in business intelligence tool dashboards.

Tune in to learn about how Splunk’s new release of the ODBC connector allows you to:

  • Enable your business users to analyze and visualize mission critical machine data
  • Expose Splunk data collected from your app and services in a consumable way to a non technical audience
  • Create high quality visualizations of your Splunk data in your favorite BI tool

Check out our Splunk ODBC conversations in Splunk Answers community for more!

Splunk Employee
Splunk Employee

Hey everyone! We had some great questions during this Tech Talk in June. 

Recapping for all!

Q: The documentation I read indicates that the ODBC driver is for Windows only. Are there plans to make an OSX version?
A: Yes! We are actively working on OSX support. We don't have an ETA at this time but do stay tuned for updates!
Q: Is the ODBC driver available for splunk cloud?
A: Yes! The ODBC driver is available for Splunk Cloud 7.3 and higher
Q: What type of Splunk instance is this? Full Splunk Enterprise or Heavy forwarder?
A: The ODBC driver is installed on the Windows environment where the BI Tool (in this case Tableau) is installed
Q: Where are the ODBC credentials stored? Are they encrypted?
A: The credentials are actually your Splunk login credentials
Q: how to connect to splunk cloud ?
A: It's the same process to connect to Splunk Cloud 7.3 ! In the installation process, just point to your Splunk Cloud instance.
Q: What about ad-hoc queries for visualization exploration? For example, I may need to reduce my fields because the visualization won't fit. Is there a back and forth with a saved query, or can I do an ad-hoc Splunk query in tableau leveraging the new ODBC driver?
A: The ODBC driver only supports Saved Searches, and not ad-hoc queries. That means you'll need to update the Saved Search to update the query.
Q: does the ODBC driver need to be installed on a Search Head?
A: No, the ODBC driver is installed on the Windows environment where your BI Tool is installed.  In the installation process, just point the SHC you want to use.
Q: Is there a PowerBI server driver also?
A: Yes, the ODBC driver also works with PowerBI. Check out the Splunk Docs for details on how to set that up. https://docs.splunk.com/Documentation/ODBC/3.0.1/UseODBC/PowerBI
 Q: Do you think the ODBC driver could be used to move data to Azure DataLake
A: We haven't tested that specific use case.
Splunk Employee
Splunk Employee

We also want to make sure you have these additional resources for your journey:

  • Download the ODBC Driver from Splunkbase (Compatible with 7.3 and above; Cloud compatible)
  • Splunk ODBC Driver Documentation (Get step by step details to install and use the ODBC Driver with your BI Tool of choice)