Seeking Guidance on Integrating Splunk with KNIME for Data Analytics

[bjonson974]

Hello Everyone,

I am currently working on a complex project that involves the integration of Splunk with KNIME splunk for data analytics- Open for Innovation | KNIME. My goal is to efficiently pull logs and other data from Splunk into KNIME for further analysis.

Though I’ve tried following the standard documentation, I’m encountering some unexpected obstacles and challenges in the process. Has anyone here successfully established a connection between KNIME and Splunk? If so, could you please share the detailed steps, specific nodes, or any additional extensions that you used?

Also, I would love to know if there are any best practices or common pitfalls to watch out for when attempting this integration. I’m eager to learn from anyone’s experience, whether it’s success or failure, as it will surely guide me in the right direction.

Thanks in Advance.

[ScottF]

Hi @bjonson974 and welcome to the forum.

Please take a look at the post below. I think the tricky bit will be if you can get your hands on a JDBC driver for Splunk.

Splunk data in Knime

Hello @ggoel, and welcome to KNIME Community! You should first find and download JDBC driver for Splunk. Then register that driver within KNIME and use DB Connector node to connect to Splunk. After that you can use database nodes to get get data you want into KNIME. Here is part of KNIME Database guide for registering your own JDBC driver: https://docs.knime.com/latest/db_extension_guide/index.html#register_jdbc And here I found JDBC driver for Splunk provided by CData: https://splunkbase.…