Splunk® ODBC Driver

Install and Use Splunk ODBC Driver

Acrobat logo Download manual as PDF


Acrobat logo Download topic as PDF

Access data models using the Splunk ODBC Driver

The Splunk Open Database Connectivity (ODBC) Driver natively supports accessing data models that are defined on your Splunk platform instance. As with saved searches, once you've created a data model object and its attributes, the Splunk ODBC Driver does all the work to expose that data model object to your ODBC-enabled app, which can improve efficiency in your Splunk platform deployment.

Data models map semantic knowledge about one or more datasets. The data model encodes the domain knowledge that is necessary to generate specialized searches of those datasets. Data models are what let you use pivots to produce useful reports and dashboards without having to write the searches that generate them. Data models contain data model objects, which are specifications for a dataset. Each data model object represents a different dataset within the larger set of data that Splunk software indexes.

Before using data models and their objects through the Splunk ODBC Driver, familiarize yourself with their concepts. If you don't already have data models defined on your Splunk platform instance, consider installing the Splunk Common Information Model add-on, which includes several predefined data models.

To learn more about data models, see the following topics in the Splunk Enterprise Knowledge Manager manual:

Access data models

You access data models in much the same way you access saved searches. Data model objects appear as tables in whichever app you are using with the Splunk ODBC Driver to connect to your Splunk platform instance.

To work with data models and their objects, follow these steps:

  1. Before choosing the data model and data model object in your ODBC-connected app, decide on the data models and data model objects you want to work with. Make a note of the exact names of both the data model and the specific data model object you want to access.
  2. Using your chosen app, such as Microsoft Excel, Tableau Desktop, or Microsoft Power BI, create a new data connection.
  3. When the time comes to choose a table and columns to use, find the data model and object you noted in step 1. They are listed as follows: <data_model_object> in <data_model>. For example, if you wanted to use the Ticket Management data model and its Problem data model object, look for the entry in the table list called Problem in Ticket_Management.


Data model excel.jpg

You can now proceed just as you would if you were accessing reports using the driver. For more information about what to do next, refer to the documentation in this manual that is specific to your ODBC-enabled app:

Last modified on 13 February, 2023
PREVIOUS
Configure the Splunk ODBC driver with Microsoft Power BI
  NEXT
Configure the Splunk ODBC driver to work with Microsoft Excel on macOS

This documentation applies to the following versions of Splunk® ODBC Driver: 3.1.0, 3.1.1


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters