Ready to get started?

Learn more about CData Sync or sign up for a free trial:

Learn More

Automated Continuous Splunk Replication to Snowflake

Use CData Sync for automated, continuous, customizable Splunk replication to Snowflake.

Always-on applications rely on automatic failover capabilities and real-time data access. CData Sync integrates live Splunk data into your Snowflake instance, allowing you to consolidate all of your data into a single location for archiving, reporting, analytics, machine learning, artificial intelligence and more.

Configure Snowflake as a Replication Destination

Using CData Sync, you can replicate Splunk data to Snowflake. To add a replication destination, navigate to the Connections tab.

  1. Click Add Connection.
  2. Select Snowflake as a destination.
  3. Enter the necessary connection properties. To connect to Snowflake, set the following:
    • User: The username provided for authentication with the Snowflake database
    • Password: The Snowflake user's password
    • AuthScheme: The authentication scheme used. Accepted entries are PASSWORD, OKTA
    • Account: The Account provided for authentication with Snowflake
    • URL: the URL of the Snowflake database instance, for example: https://myaccount.snowflakecomputing.com
    • Warehouse: The name of the Snowflake warehouse
    • Database: The name of the Snowflake database
    • Schema: The schema of the Snowflake database
  4. Click Test Connection to ensure that the connection is configured properly.
  5. Click Save Changes.

Configure the Splunk Connection

You can configure a connection to Splunk from the Connections tab. To add a connection to your Splunk account, navigate to the Connections tab.

  1. Click Add Connection.
  2. Select a source (Splunk).
  3. Configure the connection properties.

    To authenticate requests, set the User, Password, and URL properties to valid Splunk credentials. The port on which the requests are made to Splunk is port 8089.

    The data provider uses plain-text authentication by default, since the data provider attempts to negotiate TLS/SSL with the server.

    If you need to manually configure TLS/SSL, see Getting Started -> Advanced Settings in the data provider help documentation.

  4. Click Connect to ensure that the connection is configured properly.
  5. Click Save Changes.

Configure Replication Queries

CData Sync enables you to control replication with a point-and-click interface and with SQL queries. For each replication you wish to configure, navigate to the Jobs tab and click Add Job. Select the Source and Destination for your replication.

Replicate Entire Tables

To replicate an entire table, click Add Tables in the Tables section, choose the table(s) you wish to replicate, and click Add Selected Tables.

Customize Your Replication

You can use the Transform feature to customize your replication. The Transform feature allows you to specify which columns to replicate, rename the columns at the destination, and even perform operations on the source data before replicating. To customize your replication, click the Transform button in the Tables section and customize the replication.

Schedule Your Replication

In the Schedule section, you can schedule a job to run automatically, configuring the job to run after specified intervals ranging from once every 15 minutes to once every month.

Once you have configured the replication job, click Save Changes. You can configure any number of jobs to manage the replication of your Splunk data to Snowflake.