Learn more
 

Ready to get started?

Download a free trial of the Splunk ODBC Driver to get started:

 Download Now

Learn more:

Splunk Icon Splunk ODBC Driver

The Splunk ODBC Driver is a powerful tool that allows you to connect with live Splunk, directly from any applications that support ODBC connectivity.

Access Splunk like you would a database - read, write, and update Datamodels, Datasets, SearchJobs, etc. through a standard ODBC Driver interface.

In this article

Related articles

How to Use a Microsoft Access Database to Update Splunk Data in Real Time


Update Splunk data by creating a linked table in Microsoft Access with the CData Splunk ODBC Driver.

CData ODBC drivers connect your data to any database management tool that supports Open Database Connectivity (ODBC). This includes many of the most popular productivity tools, adding new capabilities for document sharing and collaboration. Using the CData ODBC driver for Splunk, you can update live Splunk data in Microsoft Access; for example, you can make updates that can be immediately seen by other users.

Connect to Splunk as an ODBC Data Source

If you have not already, first specify connection properties in an ODBC DSN (data source name). This is the last step of the driver installation. You can use the Microsoft ODBC Data Source Administrator to create and configure ODBC DSNs.

To authenticate requests, set the User, Password, and URL properties to valid Splunk credentials. The port on which the requests are made to Splunk is port 8089.

The data provider uses plain-text authentication by default, since the data provider attempts to negotiate TLS/SSL with the server.

If you need to manually configure TLS/SSL, see Getting Started -> Advanced Settings in the data provider help documentation.

Create a Linked Table to DataModels Data

Follow the steps below to create a linked table, which enables you to access live DataModels data.

  1. On the External Data tab in Access, click ODBC Database.
  2. Select the option to link to the data source. A linked table will enable you to read from and write data to the DataModels table.

  3. Select the CData Splunk data source from the Machine Data Source tab.

  4. Select the DataModels table. For more information on this table, see the "Data Model" chapter in the help documentation.

  5. Double-click the linked table to make edits. The linked table will always have up-to-date data and any changes will be reflected back to the underlying table.