Learn more
 

Ready to get started?

Download a free trial of the Splunk ODBC Driver to get started:

 Download Now

Learn more:

Splunk Icon Splunk ODBC Driver

The Splunk ODBC Driver is a powerful tool that allows you to connect with live Splunk, directly from any applications that support ODBC connectivity.

Access Splunk like you would a database - read, write, and update Datamodels, Datasets, SearchJobs, etc. through a standard ODBC Driver interface.

In this article

Related articles

Create SSAS Tabular Models from Splunk Data


How to build a SQL Server Analysis Service Tabular Model from Splunk data using CData drivers.

SQL Server Analysis Services (SSAS) is an analytical data engine used in decision support and business analytics. It provides enterprise-grade semantic data models for business reports and client applications, such as Power BI, Excel, Reporting Services reports, and other data visualization tools. When paired with the CData ODBC Driver for Splunk, you can create a tabular model from Splunk data for deeper and faster data analysis.

Create a Connection to Splunk Data

If you have not already, first specify connection properties in an ODBC DSN (data source name). This is the last step of the driver installation. You can use the Microsoft ODBC Data Source Administrator to create and configure ODBC DSNs.

To authenticate requests, set the User, Password, and URL properties to valid Splunk credentials. The port on which the requests are made to Splunk is port 8089.

The data provider uses plain-text authentication by default, since the data provider attempts to negotiate TLS/SSL with the server.

If you need to manually configure TLS/SSL, see Getting Started -> Advanced Settings in the data provider help documentation.

Creating a Data Source for Splunk

Start by creating a new Analysis Services Tabular Project in Visual Studio. Next create a Data Source for Splunk in the project.

  1. In the Tabular Model Explorer, right-click Data Sources and select "New Data Source"
  2. Select "ODBC" from the Other tab and click "Connect"
  3. Select the DSN you previously configured
  4. Choose "Default or Custom" as the authentication option and click "Connect"

Add Tables & Relationships

After creating the data source you are ready to import tables and define the relationships between the tables.

  1. Right-click the new data source, click "Import New Tables" and select the tables to import
  2. After importing the tables, right-click "Relationships" and click "Create Relationships"
  3. Select table(s), and choose the foreign keys, cardinality, and filter direction

Create Measures

After importing the tables and defining the relationships, you are ready to create measures.

  1. Select the column in the table for which you wish to create a measure
  2. In the Extensions menu -> click "Columns" -> "AutoSum" and select your aggregation method

Deploy the Model

Once you create measures, you are ready to deploy the model. Configure the target server and database by right-clicking the project and selecting "Properties." Configure the "Deployment Server" properties and click "OK."

After configuring the deployment server, open the "Build" menu and click "Deploy Solution." You now have a tabular model for Splunk data in your SSAS instance, ready to be analyzed, reported, and viewed. Get started with a free, 30-day trial of the CData ODBC Driver for Splunk.