All Apps and Add-ons

Anyone have luck ingesting InfluxDB into Splunk DB Connect?

je0408
New Member

We recently setup an InfluxDB but now we'd like to get that data onto our Splunk Instance. One idea was using DB Connect, but I dont think DB Connect supports Influxdata.

If anyone out there has any other ideas/recommendations, please advise.

0 Karma
1 Solution

rjthibod
Champion

Pretty sure that won't work unless there is an ODBC driver for InfluxDB, which I am pretty sure there is not.

Also, InfluxDB is a time-series database, not a relational database, so the bigger question is what is your use case?

  • If you care about the raw or aggregated metrics from Influx getting streamed into Splunk, then you could probably write a TICK script in Kapacitor to do that as job. Likely have to format the raw data into a custom format and use one of Kapacitor's output mechanisms (e.g., HTTP post, write to a log file, etc.) to get that data in Splunk
  • If you care about running queries in SPL that map to InfluxDB queries, likely going to have to write a custom command that handles that for you unless someone can provide an ODBC-like connection for DBConnect to work with InfluxDB (<- I consider this highly unlikely given the nature of InfluxDB and that it competes directly with Splunks Metrics Index feature in 7.0).

View solution in original post

0 Karma

indeed_2000
Motivator

@je0408 

did you connect splunkdb with influxdb?

i try it but got error:

https://community.splunk.com/t5/Splunk-Search/driver-influxdb-to-splunk-db/m-p/605850#M210681

would please how do you do this?

 Thanks

0 Karma

rjthibod
Champion

Pretty sure that won't work unless there is an ODBC driver for InfluxDB, which I am pretty sure there is not.

Also, InfluxDB is a time-series database, not a relational database, so the bigger question is what is your use case?

  • If you care about the raw or aggregated metrics from Influx getting streamed into Splunk, then you could probably write a TICK script in Kapacitor to do that as job. Likely have to format the raw data into a custom format and use one of Kapacitor's output mechanisms (e.g., HTTP post, write to a log file, etc.) to get that data in Splunk
  • If you care about running queries in SPL that map to InfluxDB queries, likely going to have to write a custom command that handles that for you unless someone can provide an ODBC-like connection for DBConnect to work with InfluxDB (<- I consider this highly unlikely given the nature of InfluxDB and that it competes directly with Splunks Metrics Index feature in 7.0).
0 Karma

Nadhiyaa
Path Finder

I am having the same issue . Is there a way to have odbc driver in splunk so that can connected from Splunk DB Connect app

0 Karma
Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...