11/29/2023 0 Comments Splunk join to database![]() Set the LOCATION parameter, using the DSN and credentials configured earlier.įor Splunk, set SERVERNAME to 'localhost' or '127.0.0.1' and leave PORT empty.WITH IDENTITY = 'splunk_username', SECRET = 'splunk_password' Ĭreate an External Data Source for SplunkĮxecute a CREATE EXTERNAL DATA SOURCE SQL command to create an external data source for Splunk with PolyBase: ![]() NOTE: IDENTITY and SECRET correspond with the User and Password properties for Splunk.ĬREATE DATABASE SCOPED CREDENTIAL splunk_creds Create an External Data Source for Splunk DataĪfter configuring the connection, you need to create a master encryption key and a credential database for the external data source.Įxecute the following SQL command to create a new master key, 'ENCRYPTION,' to encrypt the credentials for the external data source.ĬREATE MASTER KEY ENCRYPTION BY PASSWORD = 'password' Įxecute the following SQL command to create credentials for the external data source connected to Splunk data. Navigate to the Tables tab to review the table definitions for Splunk. If you need to manually configure TLS/SSL, see Getting Started -> Advanced Settings in the data provider help documentation.Ĭlick "Test Connection" to ensure that the DSN is connected to Splunk properly. The data provider uses plain-text authentication by default, since the data provider attempts to negotiate TLS/SSL with the server. The port on which the requests are made to Splunk is port 8089. User, Password, and URL properties to valid Splunk credentials. To create an external data source in SQL Server using PolyBase, configure a System DSN (CData Splunk Sys is created automatically). You can use the Microsoft ODBC Data Source Administrator to create and configure ODBC DSNs. This is the last step of the driver installation. If you have not already, first specify connection properties in an ODBC DSN (data source name). And with PolyBase, you can also join SQL Server data with Splunk data, using a single query to pull data from distributed sources. When you issue complex SQL queries from SQL Server to Splunk, the driver pushes down supported SQL operations, like filters and aggregations, directly to Splunk and utilizes the embedded SQL engine to process unsupported operations (often SQL functions and JOIN operations) client-side. The CData ODBC drivers offer unmatched performance for interacting with live Splunk data using PolyBase due to optimized data processing built into the driver. NOTE: PolyBase is only available on SQL Server 19 and above, and only for Standard SQL Server. This article describes creating an external data source and external tables to grant access to live Splunk data using T-SQL queries. When paired with the CData ODBC Driver for Splunk, you get access to your Splunk data directly alongside your SQL Server data. PolyBase for SQL Server allows you to query external data by using the same Transact-SQL syntax used to query a database table.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |