How to connect to Splunk Data with Squirrel SQL client

The CData JDBC Driver for Splunk enables you to execute queries to Splunk data in tools like Squirrel SQL Client. In this article, you will create a JDBC data source for Splunk data and execute queries.

Add the JDBC Driver for Splunk

Follow the steps below to add the driver JAR.

1. In Squirrel SQL, click Windows -> View Drivers.
2. Click the plus icon to open the Add Driver wizard.
3. In the Name box, enter a user-friendly name for the driver; for example, CData JDBC Driver for Splunk.
4. In the Example URL box, enter jdbc:splunk:
5. In the Extra Class Path tab, click Add.
6. In the file explorer dialog that opens, select the JAR file for the driver, located in the lib subfolder of the installation directory.
7. Click List Drivers to populate the Class Name menu with the class name for the driver, cdata.jdbc.splunk.SplunkDriver.

Define Connection Properties

Follow the steps below to save connection properties in the driver alias.

1. Click Windows -> View Aliases.
2. In the pane that lists the aliases, click the plus icon.

3. In the Add Alias wizard that opens, the following fields are required for the JDBC driver:

   • Name: Enter a name for the alias; for example, CData Splunk Source.
   • Driver: Select the CData JDBC Driver for Splunk.
   • URL: Enter jdbc:splunk:
   • User Name: Enter the username, which is added to the JDBC URL.
   • Password: Enter the password, which is added to the JDBC URL.
   👁 The alias definition, containing the connection parameters. (Salesforce is shown.)
   
4. If you want to define any additional properties, click Properties.
5. In the Driver properties tab of the dialog that appears, select the Use driver properties checkbox.
6. In the Specify column, select the checkboxes for the required connection properties.

   To authenticate requests, set the , , and properties to valid Splunk credentials. The port on which the requests are made to Splunk is port 8089.

   The data provider uses plain-text authentication by default, since the data provider attempts to negotiate TLS/SSL with the server.

   If you need to manually configure TLS/SSL, see Getting Started -> Advanced Settings in the data provider help documentation.

   Below is a typical connection string:

   jdbc:splunk:user=MyUserName;password=MyPassword;URL=MyURL;InitiateOAuth=GETANDREFRESH;
   

   👁 Connection properties automatically detected by Squirrel SQL. (Salesforce is shown.)
   
7. In the dialog that appears after you click OK, click connect to test the connection.

Discover Schemas and Query Splunk Data

After the metadata has loaded, a new tab for the Splunk data source is displayed. On the Objects subtab, you can discover schema information, such as the available tables and views.

👁 Column metadata for a table. (Salesforce is shown.)

To view table data, select the table on the Objects tab. The table data is then loaded in a grid on the Content tab.

To execute an SQL query, enter the query on the SQL tab and then click Run SQL (the runner icon). For example:

SELECT Name, Owner FROM DataModels