Splunk Search

Splunk reading data from Microsoft SQL database

raghu_vaidya
Explorer

Hi, Can splunk read data from Microsoft SQL Server 2008? We have an application which logs business exceptions to SQL database, currently we have a customized dashboard which shows these exceptions to business users, we are considering to use Splunk for all kinds of exceptions including business exceptions, is there a way to display SQL data (business exceptions) using Splunk.

Thanks, -Wiz

Tags (2)
1 Solution

dwaddle
SplunkTrust
SplunkTrust

Directly, no. Splunk does not have any native interface to an SQL database of any kind. The supported method for doing this is with a 'scripted input' where Splunk periodically runs a shell script of your design and indexes its output. That shell script is free to connect to a database and extract whatever data it desires.

There are some add-on apps in Splunkbase that provide examples / implementations of this scripted input. The first one I found was http://splunk-base.splunk.com/apps/27105/jdbc-scripted-input . I have not tried it, and don't know if it will work for your purpose or not.

View solution in original post

ChrisG
Splunk Employee
Splunk Employee

You can also use the Splunk MySQL Connector app to define lookups to query tables in MySQL databases. See About Splunk MySQL Connector for more information. The app is available on Splunkbase.

0 Karma

dwaddle
SplunkTrust
SplunkTrust

Directly, no. Splunk does not have any native interface to an SQL database of any kind. The supported method for doing this is with a 'scripted input' where Splunk periodically runs a shell script of your design and indexes its output. That shell script is free to connect to a database and extract whatever data it desires.

There are some add-on apps in Splunkbase that provide examples / implementations of this scripted input. The first one I found was http://splunk-base.splunk.com/apps/27105/jdbc-scripted-input . I have not tried it, and don't know if it will work for your purpose or not.

dwaddle
SplunkTrust
SplunkTrust

Can you give an update?

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...