Data ModelCData JDBC Driver for Splunk 2019 - Build 19.0.7354
The driver models Splunk reports, searches, datasets, and data models as tables in a relational database that you can read from/write to with SQL-92 queries.
Dynamic Schema Generation
You can work with all of the tables in your account: when you connect the driver retrieves the metadata from Splunk and dynamically reflects any changes in the table schemas.
You can call the CreateSchema stored procedure to persist a static schema across connections. The stored procedure saves the schema to a text file; the text file has a simple format that also makes schemas easy to customize.
Collaborative Query Processing
Enabling SQL-92 queries, the driver offloads as much of the SELECT statement processing as possible to the Splunk APIs and then processes the rest of the query in memory. See SupportEnhancedSQL for more information on how the driver circumvents API limitations with in-memory client-side processing.
The following sections provide more information on limitations and requirements for specific Splunk APIs.
See Tables for more details on updating and querying datasets, data models, and searches.
The driver also surfaces data through Views representing the following Splunk objects:
- Reports: See LookUpReport for an example of a view representing a saved report in Splunk.
- Data-model datasets: See AlertsInInternalServer for an example of a view representing a dataset. See Datasets to retrieve a list of dataset views.
- Table-type datasets: See UploadedModel for an example of a view representing a table dataset in Splunk.