How to Use a Microsoft Access Database to Update Splunk Data in Real Time

CData ODBC drivers connect your data to any database management tool that supports Open Database Connectivity (ODBC). This includes many of the most popular productivity tools, adding new capabilities for document sharing and collaboration. Using the CData ODBC driver for Splunk, you can update live Splunk data in Microsoft Access; for example, you can make updates that can be immediately seen by other users.

Connect to Splunk as an ODBC Data Source

If you have not already, first specify connection properties in an ODBC DSN (data source name). This is the last step of the driver installation. You can use the Microsoft ODBC Data Source Administrator to create and configure ODBC DSNs.

To authenticate requests, set the , , and properties to valid Splunk credentials. The port on which the requests are made to Splunk is port 8089.

The data provider uses plain-text authentication by default, since the data provider attempts to negotiate TLS/SSL with the server.

If you need to manually configure TLS/SSL, see Getting Started -> Advanced Settings in the data provider help documentation.

Create a Linked Table to DataModels Data

Follow the steps below to create a linked table, which enables you to access live DataModels data.

1. On the External Data tab in Access, click ODBC Database. 👁 Use the Get External Data wizard to work with ODBC data sources in Access.
   
2. Select the option to link to the data source. A linked table will enable you to read from and write data to the DataModels table. 👁 Linked Tables enable you use the live connection to Splunk that is provided by the driver.
   

3. Select the CData Splunk data source from the Machine Data Source tab.

   👁 DSNs listed in the Get External Data wizard.
   
4. Select the DataModels table. For more information on this table, see the "Data Model" chapter in the help documentation. 👁 Available tables. (Google is shown.)
   

5. Double-click the linked table to make edits. The linked table will always have up-to-date data and any changes will be reflected back to the underlying table.

   👁 A linked table to the live data. (Google is shown.)