Create Splunk-Connected Dashboards in Grafana

Grafana is an open-source platform that allows users to analyze, monitor, and visualize telemetry from various data sources. When combined with CData Connect AI, you gain immediate access to Splunk data for business dashboards. This article outlines the process of connecting to Splunk using Connect AI and creating a basic dashboard from Splunk data within Grafana.

CData Connect AI offers a pure SQL Server, cloud-to-cloud interface for Splunk, enabling the creation of dashboards directly from live Splunk data within Grafana, all without the need for data replication to a native database. As you build visualizations, Grafana generates SQL queries to gather data. With its inherent optimized data processing capabilities, CData Connect AI efficiently channels all supported SQL operations, including filters and JOINs, directly to Splunk. This leverages server-side processing to swiftly deliver the requested Splunk data.

Configure Splunk Connectivity for Grafana

Connectivity to Splunk from Grafana is made possible through CData Connect AI. To work with Splunk data from Grafana, we start by creating and configuring a Splunk connection.

1. Log into Connect AI, click Sources, and then click Add Connection
👁 Adding a Connection

2. Select "Splunk" from the Add Connection panel
👁 Selecting a data source

3. Enter the necessary authentication properties to connect to Splunk.

   To authenticate requests, set the , , and properties to valid Splunk credentials. The port on which the requests are made to Splunk is port 8089.

   The data provider uses plain-text authentication by default, since the data provider attempts to negotiate TLS/SSL with the server.

   If you need to manually configure TLS/SSL, see Getting Started -> Advanced Settings in the data provider help documentation.

   👁 Configuring a connection (Salesforce is shown)
   
4. Click Save & Test
5. Navigate to the Permissions tab in the Add Splunk Connection page and update the User-based permissions. 👁 Updating permissions
   

Add a Personal Access Token

When connecting to Connect AI through the REST API, the OData API, or the Virtual SQL Server, a Personal Access Token (PAT) is used to authenticate the connection to Connect AI. It is best practice to create a separate PAT for each service to maintain granularity of access.

1. Click on the Gear icon () at the top right of the Connect AI app to open the settings page.
2. On the Settings page, go to the Access Tokens section and click Create PAT.
3. Give the PAT a name and click Create. 👁 Creating a new PAT
   
4. The personal access token is only visible at creation, so be sure to copy it and store it securely for future use.

With the connection configured and a PAT generated, you are ready to connect to Splunk data from Grafana.

Visualize Live Splunk Data in Grafana

To establish a connection from Grafana to the CData Connect AI Virtual SQL Server API, follow these steps.

1. If you have not already done so, download and install Grafana for your operating system from the Grafana Website. Once installed, access Grafana at http://localhost:3000/.
2. Log in to Grafana with your username and password for Grafana. If this is your first time logging in, the username is admin and the password is admin.
3. On the navigation menu, click Sources > Add new connection. On this page, you can search for Microsoft SQL Server and select it as your data source. 👁 Adding a new Connection in Grafana
   
4. Select Microsoft SQL Server and click Add new data source. 👁 Adding a new Connection in Grafana
   
5. Enter a name for the new data source and then enter the following connection settings:
   • Host: tds.cdata.com:14333
   • Database: enter the Connection Name of the CData Connect AI data source you want to connect to (for example, Splunk1).
   • Username: enter your CData Connect AI username. This is displayed in the top-right corner of the CData Connect AI interface. For example, [email protected].
   • Password: enter the PAT you previously generated.
   👁 Configure connection to the Connect AI Virtual SQL Server API. (Salesforce shown)
   
6. Click Save & Test. A Database Connect OK message appears when you have a successful connection established.

Create a Dashboard

Once you create the data source for Splunk, you can start building dashboards on Splunk data. Start in the navigation menu and click Dashboards

1. On the Dashboards page, click + Create dashboard, then click + Add visualization.
2. This opens the Select data source window where you can select your created connection. 👁 Select your connection. (Salesforce shown)
   
3. After selecting your connection, you can choose the tables and columns that you want to query for your visualization. Then press Run Query to run the generated query. 👁 Select the tables and columns you want to query. (Salesforce shown)
   
4. After running your query, the resulting data is populated above the query editor. Here you can select the visualization that you want to use to present your data on the dashboard panel. 👁 Visualize your queried data. (Salesforce shown)
   
5. When you have finished editing your panel, you can click Save dashboard to save the changes made to your Dashboard.

To get live data access to hundreds of SaaS, Big Data, and NoSQL sources directly from your cloud applications, try CData Connect AI today!