Manage Splunk Data in DBArtisan as a JDBC Source

The CData JDBC Driver for Splunk seamlessly integrates Splunk data into database management tools like DBArtisan by enabling you to access Splunk data as a database. This article shows how to create a JDBC source for Splunk in DBArtisan. You can then edit data visually and execute standard SQL.

Integrate Splunk Data into DBArtisan Projects

Follow the steps below to register Splunk data as a database instance in your project:

1. In DBArtisan, click Data Source -> Register Datasource.
2. Select Generic JDBC.
3. Click Manage.
4. In the resulting dialog, click New. Enter a name for the driver and click Add. In the resulting dialog, navigate to the driver JAR. The driver JAR is located in the lib subfolder of the installation directory.
5. In the Connection URL box, enter credentials and other required connection properties in the JDBC URL.

   To authenticate requests, set the User, Password, and URL properties to valid Splunk credentials. The port on which the requests are made to Splunk is port 8089.

   The data provider uses plain-text authentication by default, since the data provider attempts to negotiate TLS/SSL with the server.

   If you need to manually configure TLS/SSL, see Getting Started -> Advanced Settings in the data provider help documentation.

   Built-in Connection String Designer

   For assistance in constructing the JDBC URL, use the connection string designer built into the Splunk JDBC Driver. Either double-click the JAR file or execute the jar file from the command-line.

   java -jar cdata.jdbc.splunk.jar

   Fill in the connection properties and copy the connection string to the clipboard.

   Below is a typical connection string:

   jdbc:splunk:user=MyUserName;password=MyPassword;URL=MyURL;InitiateOAuth=GETANDREFRESH
6. Finish the wizard to connect to Splunk data. Splunk entities are displayed in the Datasource Explorer.

You can now work with Splunk data as you work with any other database. See the driver help documentation for more information on the queries supported by the Splunk API.