Automate Splunk Data Replication to Azure Data Lake

Always-on applications rely on automatic failover capabilities and real-time data access. CData Sync integrates live Splunk data into your Azure Data Lake instance, allowing you to consolidate all of your data into a single location for archiving, reporting, analytics, machine learning, artificial intelligence and more.

Configure Azure Data Lake as a Replication Destination

Using CData Sync, you can replicate Splunk data to Azure Data Lake. To add a replication destination, navigate to the Connections tab.

1. Click Add Connection.
2. Select Azure Data Lake as a destination.

3. Enter the necessary connection properties. To connect to Azure Data Lake, set the following properties, depending on your version of Azure Data Lake Storage:

   Azure Data Lake Storage Gen1

   • Generation: Must be set to 1.
   • Account: The name of the Azure Data Lake Store account.
   • Path: The path to store the replicated file (the root directory by default).
   • TenantId: The tenant ID.
   • OAuthClientId: The application ID for the Azure Directory web application (see the CData Sync Help for more information).
   • OAuthClientSecret: The key generated for the Azure Directory web application (see the CData Sync Help for more information).

   Azure Data Lake Storage Gen2

   • Generation: Must be set to 2.
   • Access Key: The access key used to authenticate (see the CData Sync Help for more information).
   • Account: The name of the Azure Data Lake Store account.
   • FileSystem: The file systems used for this account.
   • Path: The path to store the replicated file (the root directory by default).
4. Click Test Connection to ensure that the connection is configured properly.
5. Click Save Changes.

Configure the Splunk Connection

You can configure a connection to Splunk from the Connections tab. To add a connection to your Splunk account, navigate to the Connections tab.

1. Click Add Connection.
2. Select a source (Splunk).
3. Configure the connection properties.
   
   

   To authenticate requests, set the User, Password, and URL properties to valid Splunk credentials. The port on which the requests are made to Splunk is port 8089.

   The data provider uses plain-text authentication by default, since the data provider attempts to negotiate TLS/SSL with the server.

   If you need to manually configure TLS/SSL, see Getting Started -> Advanced Settings in the data provider help documentation.

4. Click Connect to ensure that the connection is configured properly.
5. Click Save Changes.

Configure Replication Queries

CData Sync enables you to control replication with a point-and-click interface and with SQL queries. For each replication you wish to configure, navigate to the Jobs tab and click Add Job. Select the Source and Destination for your replication.

Replicate Entire Tables

To replicate an entire table, click Add Tables in the Tables section, choose the table(s) you wish to replicate, and click Add Selected Tables.

Customize Your Replication

You can use the Columns and Query tabs of a task to customize your replication. The Columns tab allows you to specify which columns to replicate, rename the columns at the destination, and even perform operations on the source data before replicating. The Query tab allows you to add filters, grouping, and sorting to the replication.

Schedule Your Replication

In the Schedule section, you can schedule a job to run automatically, configuring the job to run after specified intervals ranging from once every 10 minutes to once every month.

Once you have configured the replication job, click Save Changes. You can configure any number of jobs to manage the replication of your Splunk data to PostgreSQL.