How it works...

DB Connect enables real-time integration between Splunk and traditional relational databases. In this recipe, you leveraged the installed Splunk DB Connect application and configured it to talk to a product inventory table in your external productdb database. When installed, DB Connect sets up something called a Java Bridge Server that is essentially a Java Virtual Machine (JVM) constantly running in the background. The Java Bridge Server helps speed up connectivity to external databases by allocating memory and caching a lot of the metadata associated with the database tables. Once the productdb database was configured through DB Connect, you were able to execute standard SQL inside a Splunk search and return the contents ...

Get Splunk Operational Intelligence Cookbook - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.