Learn more
 

Ready to get started?

Download a free trial of the Splunk ODBC Driver to get started:

 Download Now

Learn more:

Splunk Icon Splunk ODBC Driver

The Splunk ODBC Driver is a powerful tool that allows you to connect with live Splunk, directly from any applications that support ODBC connectivity.

Access Splunk like you would a database - read, write, and update Datamodels, Datasets, SearchJobs, etc. through a standard ODBC Driver interface.

In this article

Related articles

Create Informatica Mappings From/To an ODBC Data Source for Splunk


Create an ODBC connection to Splunk in Informatica and browse and transfer Splunk data.

Informatica provides a powerful, elegant means of transporting and transforming your data. By utilizing the CData ODBC Driver for Splunk, you are gaining access to a driver based on industry-proven standards that integrates seamlessly with Informatica's powerful data transportation and manipulation features. This tutorial shows how to transfer and browse Splunk data in Informatica PowerCenter.

Connect to Splunk as an ODBC Data Source

Information for connecting to Splunk follows, along with different instructions for configuring a DSN in Windows and Linux environments.

To authenticate requests, set the User, Password, and URL properties to valid Splunk credentials. The port on which the requests are made to Splunk is port 8089.

The data provider uses plain-text authentication by default, since the data provider attempts to negotiate TLS/SSL with the server.

If you need to manually configure TLS/SSL, see Getting Started -> Advanced Settings in the data provider help documentation.

Windows

If you have not already, first specify connection properties in an ODBC DSN (data source name). This is the last step of the driver installation. You can use the Microsoft ODBC Data Source Administrator to create and configure ODBC DSNs.

Linux

If you are installing the CData ODBC Driver for Splunk in a Linux environment, the driver installation predefines a system DSN. You can modify the DSN by editing the system data sources file (/etc/odbc.ini) and defining the required connection properties.

/etc/odbc.ini

[CData Splunk Source] Driver = CData ODBC Driver for Splunk Description = My Description user = MyUserName password = MyPassword URL = MyURL

For specific information on using these configuration files, please refer to the help documentation (installed and found online).

Create a Linked Table to DataModels Data

Follow the steps below to create a linked table, which enables you to access live DataModels data.

Create the ODBC Connection

Follow the steps below to connect to Splunk in Informatica PowerCenter:

  1. In the Informatica Developer tool connect to your repository and create a project.
  2. In the Connection Explorer pane, right-click and click Create a Connection.
  3. In the New Database Connection wizard that is displayed, enter a name and Id for the connection and in the Type menu select ODBC.
  4. In the Connection String property, enter the DSN.

NOTE: If you are working in a Linux operating system, set the Driver Manager for Linux property to unixODBC 2.3.x.

Create the Splunk Data Object

After you have created an ODBC connection to Splunk, you can now access Splunk entities in Informatica. Follow the steps below to add DataModels entities to your project.

  1. In the Object Explorer, right-click your project and then click New -> Data Object.
  2. In the wizard that is displayed, select the Relational Data Object option.
  3. Click the Browse button next to the Connection box and select the ODBC connection you created in the previous step.
  4. Select the option to create a data object from an existing resource and click the Browse button next to the Resource box.
  5. In the dialog that is displayed, clear the Show Default Schema Only option and expand the node for the ODBC connection. Select the entity that you want.

You can now browse the table in the Data Viewer: Right-click the node for the table and then click Open. On the Data Viewer view, click Run.

Create the Mapping

Follow the steps below to add the Splunk source to a mapping:

  1. In the Object Explorer, right-click your project and then click New -> Mapping.
  2. Expand the node for the Splunk connection and then drag the data object for the table onto the editor.
  3. In the dialog that appears, select the Read option.

Follow the steps below to map Splunk columns to a flat file:

  1. In the Object Explorer, right-click your project and then click New -> Data Object.
  2. Select Flat File Data Object -> Create as Empty -> Fixed Width.
  3. In the properties for the Splunk object, select the rows you want, right-click, and then click copy. Paste the rows into the flat file properties.
  4. Drag the flat file data object onto the mapping. In the dialog that appears, select the Write option.
  5. Click and drag to connect columns.

To transfer Splunk data, right-click in the workspace and then click Run Mapping.