Access data models using the Splunk ODBC Driver
The Splunk Open Database Connectivity (ODBC) Driver natively supports accessing data models that are defined on your Splunk Enterprise instance. As with saved searches, once you've created a data model object and its attributes, the Splunk ODBC Driver does all the work to expose that data model object to your ODBC-enabled app, which can improve efficiency in your Splunk platform deployment.
Data models map semantic knowledge about one or more datasets. The data model encodes the domain knowledge that is necessary to generate specialized searches of those datasets. Data models are what let you use pivots to produce useful reports and dashboards without having to write the searches that generate them. Data models contain data model objects, which are specifications for a dataset. Each data model object represents a different dataset within the larger set of data that Splunk Enterprise indexes.
Before using data models and their objects through the Splunk ODBC Driver, familiarize yourself with their concepts. If you don't already have data models defined on your Splunk Enterprise instance, consider installing the Splunk Common Information Model add-on, which includes several predefined data models.
To learn more about data models, see the following topics in the Splunk Enterprise Knowledge Manager manual:
Access data models
You access data models in much the same way you access saved searches. Data model objects appear as tables in whichever app you are using with the Splunk ODBC Driver to connect to Splunk Enterprise.
To work with data models and their objects, follow these steps:
- Before choosing the data model and data model object in your ODBC-connected app, decide on the data models and data model objects you want to work with. Make a note of the exact names of both the data model and the specific data model object you want to access.
- Using your chosen app, such as Microsoft Excel, Tableau Desktop, or Microsoft Power BI, create a new data connection.
- When the time comes to choose a table and columns to use, find the data model and object you noted in step 1. They are listed as follows:
<data_model>. For example, if you wanted to use the Ticket Management data model and its Problem data model object, look for the entry in the table list called Problem in Ticket_Management.
You can now proceed just as you would if you were accessing reports using the driver. For more information about what to do next, refer to the documentation in this manual that is specific to your ODBC-enabled app:
Configure the Splunk ODBC driver with Microsoft Power BI
Configure the Splunk ODBC driver to work with Microsoft Excel on macOS
This documentation applies to the following versions of Splunk® ODBC Driver: 3.1.0