Use the CData ODBC Driver for Splunk in Microsoft Power Query

The CData ODBC Driver for Splunk enables you to link to Splunk data in Microsoft Power Query, ensuring that you see any updates. This article details how to use the ODBC driver to import Splunk data into Microsoft Power Query.

Connect to Splunk as an ODBC Data Source

If you have not already, first specify connection properties in an ODBC DSN (data source name). This is the last step of the driver installation. You can use the Microsoft ODBC Data Source Administrator to create and configure ODBC DSNs.

To authenticate requests, set the User, Password, and URL properties to valid Splunk credentials. The port on which the requests are made to Splunk is port 8089.

The data provider uses plain-text authentication by default, since the data provider attempts to negotiate TLS/SSL with the server.

If you need to manually configure TLS/SSL, see Getting Started -> Advanced Settings in the data provider help documentation.

Import Splunk Data

Follow the steps below to import Splunk data using standard SQL:

1. From the ribbon in Excel, click Power Query -> From Other Data Sources -> From ODBC.

2. Enter the ODBC connection string. Below is a connection string using the default DSN created when you install the driver: Provider=MSDASQL.1;Persist Security Info=False;DSN=CData Splunk Source

3. Enter the SELECT statement to import data with. For example:

   SELECT Name, Owner FROM DataModels

4. Enter credentials, if required, and click Connect. The results of the query are displayed in the Query Editor Preview. You can combine queries from other data sources or refine the data with Power Query formulas. To load the query to the worksheet, click the Close and Load button.