Ready to get started?

Learn more about CData Connect Cloud or sign up for free trial access:

Free Trial

Build Interactive Dashboards from Splunk Data in Amazon QuickSight



Create a connection to Splunk data in CData Connect Cloud and insert Splunk data into Amazon QuickSight SPICE to build interactive dashboards.

Amazon QuickSight allows users to build interactive dashboards in the cloud. When paired with CData Connect Cloud, you get cloud-to-cloud access to Splunk data for visualizations, dashboards, and more. This article shows how to connect to Splunk in Connect Cloud and build dashboards in Amazon QuickSight with access to Splunk data.

CData Connect Cloud provides a pure cloud-to-cloud interface for Splunk, allowing you to allowing build visualizations from Splunk data in Amazon QuickSight. By importing your Splunk data into the Amazon QuickSight "Super-fast, Parallel, In-memory Calculation Engine" (SPICE), you can leverage the powerful data processing features of the Amazon ecosystem to build responsive dashboards. And with the ability to schedule refreshes of the data stored in SPICE, you control how up-to-date your dashboards are.

Configure Splunk Connectivity for Amazon QuickSight

Connectivity to Splunk from Amazon QuickSight is made possible through CData Connect Cloud. To work with Splunk data from Amazon QuickSight, we start by creating and configuring a Splunk connection.

  1. Log into Connect Cloud, click Connections and click Add Connection
  2. Select "Splunk" from the Add Connection panel
  3. Enter the necessary authentication properties to connect to Splunk.

    To authenticate requests, set the User, Password, and URL properties to valid Splunk credentials. The port on which the requests are made to Splunk is port 8089.

    The data provider uses plain-text authentication by default, since the data provider attempts to negotiate TLS/SSL with the server.

    If you need to manually configure TLS/SSL, see Getting Started -> Advanced Settings in the data provider help documentation.

  4. Click Create & Test
  5. Navigate to the Permissions tab in the Add Splunk Connection page and update the User-based permissions.

Add a Personal Access Token

If you are connecting from a service, application, platform, or framework that does not support OAuth authentication, you can create a Personal Access Token (PAT) to use for authentication. Best practices would dictate that you create a separate PAT for each service, to maintain granularity of access.

  1. Click on your username at the top right of the Connect Cloud app and click User Profile.
  2. On the User Profile page, scroll down to the Personal Access Tokens section and click Create PAT.
  3. Give your PAT a name and click Create.
  4. The personal access token is only visible at creation, so be sure to copy it and store it securely for future use.

With the connection configured, you are ready to connect to Splunk data from Amazon QuickSight.

Import Splunk Data into SPICE and Create Interactive Dashboards

The steps below outline creating a new data set based on the connection to Splunk in Connect Cloud, importing the dataset into SPICE, and building a simple visualization from the data.

  1. Log into Amazon QuickSight and click "Manage data."
  2. Click "Now data set," select SQL Server as the data source, configure the connection to your Connect Cloud instance, and click "Create data source."
  3. Select a table to visualize (or subait a custom SQL query for your data).
  4. Click "Edit/Preview data" to customize the data set.
  5. Select "Import to SPICE for quicker analytics" and click "Visualize."
  6. Select fields to visualize and a visual type.

Schedule Refreshes for SPICE Data Sets

QuickSight users can schedule refreshes for data sets that are imported into SPICE, ensuring that data being analyzed is only as old as the most recent refresh.

  1. Navigate to the QuickSight home page.
  2. Click "Manage data."
  3. Select the data set you wish to refresh.
  4. Click "Schedule refresh."
  5. Click Create, configure the refresh settings (time zone, repeat frequency, and starting datetime), and click Create.

Live Access to Splunk Data from Cloud Applications

At this point, you have a direct, cloud-to-cloud connection to Splunk data from your Amazon QuickSight dashboard. You can create new visualizations, build interactive dashboards, and more. For more information on gaining live access to data from more than 100 SaaS, Big Data, and NoSQL sources from cloud applications like Amazon QuickSight, refer to our Connect Cloud page.