Refine your search:

Hi, Can splunk read data from Microsoft SQL Server 2008? We have an application which logs business exceptions to SQL database, currently we have a customized dashboard which shows these exceptions to business users, we are considering to use Splunk for all kinds of exceptions including business exceptions, is there a way to display SQL data (business exceptions) using Splunk.

Thanks, -Wiz

asked 05 Jul '12, 04:12

raghu_vaidya's gravatar image

raghu_vaidya
61114
accept rate: 50%


2 Answers:

Directly, no. Splunk does not have any native interface to an SQL database of any kind. The supported method for doing this is with a 'scripted input' where Splunk periodically runs a shell script of your design and indexes its output. That shell script is free to connect to a database and extract whatever data it desires.

There are some add-on apps in Splunkbase that provide examples / implementations of this scripted input. The first one I found was jdbc scripted input on Splunkbase . I have not tried it, and don't know if it will work for your purpose or not.

link

answered 05 Jul '12, 06:48

dwaddle's gravatar image

dwaddle ♦
17.9k2934
accept rate: 33%

Can you give an update?

(16 Jul '12, 08:26) dwaddle ♦

You can also use the Splunk MySQL Connector app to define lookups to query tables in MySQL databases. See About Splunk MySQL Connector for more information. The app is available on Splunkbase.

link

answered 16 Jul '12, 09:55

ChrisG's gravatar image

ChrisG ♦
4.8k58
accept rate: 24%

Post your answer
toggle preview

Follow this question

Log In to enable email subscriptions

RSS:

Answers

Answers + Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×941
×1

Asked: 05 Jul '12, 04:12

Seen: 3,222 times

Last updated: 16 Jul '12, 09:55

Copyright © 2005-2014 Splunk Inc. All rights reserved.