Experience with Splunk ODBC connector and QlikView / Direct Discovery
Hi - I am working with a client that wants to integrate QlikView on top of SPlunk. Splunk has released an ODBC connector. The Splunk documentation only sites Excel or Tableau. I would think the the ODBC connector would work with any tool, including QlikView and we could also use the Direct Discovery functionality against the SPlunk data. Does anyone have any experience with Splunk/QlikView and more specifically the Splunk ODBC connector. Thanks in advance.
Re: Experience with Splunk ODBC connector and QlikView / Direct Discovery
The "Select..." wizard in QlikView will not work with the Splunk ODBC driver. The Splunk ODBC driver officially only supports Microsoft Excel and Tabeau. There is a work around though and assumes you have configured your Splunk ODBC driver in Windows and created a successful connection in QlikView. Give this a try:
Open a new workbook in Excel.
Click on the Data tab
Choose From Other Sources > "From Microsoft Query"
From the "Choose Data Source" dialog, select your Splunk ODBC connection.
Once connected, you'll be presented with all the saved reports to which you have access on the left hand side of the Query Wizard.
Select the report you want to include in QlikView and click "Next >"
If you don't want to perform any sorts or limits, click through to "Finish"
Choose "View data or edit query in Microsoft Query" and click "Finish"
Microsoft Query will eventually return with the data from your report.
Chose SQL... from the View menu or click the SQL icon in the toolbar.
You'll be presented with the SQL Statement Excel is using to return your data from Splunk
Copy the text from this window into your QlikView script.