Splunk Search

SQL table is log data and I want to export it into a text file???Help....

kleeterps
Explorer

Anybody have any suggestions on how to export a SQL table which are full of logs to export it into a text file so that we can import it into splunk???

Tags (1)

Ron_Naken
Splunk Employee
Splunk Employee

If this is for a one-time export of data, the newer versions of Microsoft SQL have SQL Server Integration Services (SSIS). SSIS provides a very simplified Export wizard that should accomplish your goal.

Here's a walkthrough that depicts how to export tables to flat files:
http://www.databasejournal.com/features/mssql/article.php/3580216/SQL-Server-2005-Import--Export-Wiz...

gkanapathy
Splunk Employee
Splunk Employee

With Microsoft SQL, you can use many mechanisms:

  • Via Microsoft Excel, connecting using and ADO or ODBC connector. You would add the table as an external data source, load/import it, then save/export it.
  • Write your own code. Most programming environments on Windows have easy ways to connect to a database, issue a query, and iterate over and output the resulting values in many ways.
  • Use the MSSQL Server DTS (Data Transformation Services) tools, which can be accessed via the MSSQL MMC Console. This allows you to use a wizard to specify the source data and the target.

Note that the above are effective and easy for a one-time dump and export of data, but not for monitoring and real-time indexing of live database insertions.

kleeterps
Explorer

It's MSSQL, there couple caveats like not adding any duplicates...the question is how to export the logs from MSSQL table into text file so we can import into splunk...

0 Karma

southeringtonp
Motivator
0 Karma

kleeterps
Explorer

thanks, I will look into it...

0 Karma

ftk
Motivator

What kind of SQL database are you talking about?

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...