Refine your search:

Hello all, I'm a new splunk user and I'm not familiar yet with all its features. I have a rather unusual(or not) thing in mind to do with splunk.

I have a jboss application server log, in which I have all request towards 3rd party service logged. Each request has requestId which could be extracted.

I want to use those extracted requestIds to query the 3rd party service database and to compare the results which I get with those in my log.

I realize that I'll have to do some scripting to do this, my question is : is splunk overhead for this? or I'd be better of writing some script for this.

Anyone had similar expiriences?

asked 09 May '11, 01:56

c0mrade's gravatar image

c0mrade
313
accept rate: 0%

edited 09 May '11, 07:07


2 Answers:

You can use splunk to pull entries from a database, but it will require the input you setup be a scripted input. So, yes, you can do it. However, as you suspected, it will require some scripting to do accomplish the task.

There have been a few posts about this over the last week which I find you'll probably find to be helpful and applicable to your particular scenario.

How do I setup an input for SQL Data on Splunk Answers

Index a DB-log on Splunk Answers

link

answered 09 May '11, 09:09

jbsplunk's gravatar image

jbsplunk ♦
11.1k1625
accept rate: 49%

-1

Hello I am a new splunk, for your question, I am also not quite understand the first, but some things slowly groping his way to become familiar,

link

answered 09 May '11, 02:56

joyi2011's gravatar image

joyi2011
0
accept rate: 0%

@joyi2011 I'm sorry I don't understand what you mean

(09 May '11, 07:07) c0mrade
Post your answer
toggle preview

Follow this question

Log In to enable email subscriptions

RSS:

Answers

Answers + Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×526
×88

Asked: 09 May '11, 01:56

Seen: 1,172 times

Last updated: 09 May '11, 09:09

Copyright © 2005-2012 Splunk Inc. All rights reserved.