Learn more
 

Ready to get started?

Download a free trial of the Splunk ODBC Driver to get started:

 Download Now

Learn more:

Splunk Icon Splunk ODBC Driver

The Splunk ODBC Driver is a powerful tool that allows you to connect with live Splunk, directly from any applications that support ODBC connectivity.

Access Splunk like you would a database - read, write, and update Datamodels, Datasets, SearchJobs, etc. through a standard ODBC Driver interface.

In this article

Related articles

Natively Connect to Splunk Data in PHP


The CData ODBC driver for Splunk enables you to create PHP applications with connectivity to Splunk data. Leverage the native support for ODBC in PHP.

Drop the CData ODBC Driver for Splunk into your LAMP or WAMP stack to build Splunk-connected Web applications. This article shows how to use PHP's ODBC built-in functions to connect to Splunk data, execute queries, and output the results.

Configure a DSN

If you have not already, first specify connection properties in an ODBC DSN (data source name). This is the last step of the driver installation. You can use the Microsoft ODBC Data Source Administrator to create and configure ODBC DSNs.

To authenticate requests, set the User, Password, and URL properties to valid Splunk credentials. The port on which the requests are made to Splunk is port 8089.

The data provider uses plain-text authentication by default, since the data provider attempts to negotiate TLS/SSL with the server.

If you need to manually configure TLS/SSL, see Getting Started -> Advanced Settings in the data provider help documentation.

Establish a Connection

Open the connection to Splunk by calling the odbc_connect or odbc_pconnect methods. To close connections, use odbc_close or odbc_close_all.

$conn = odbc_connect("CData ODBC Splunk Source","user","password");

Connections opened with odbc_connect are closed when the script ends. Connections opened with the odbc_pconnect method are still open after the script ends. This enables other scripts to share that connection when they connect with the same credentials. By sharing connections among your scripts, you can save system resources, and queries execute faster.

$conn = odbc_pconnect("CData ODBC Splunk Source","user","password"); ... odbc_close($conn); //persistent connection must be closed explicitly

Create Prepared Statements

Create prepared statements and parameterized queries with the odbc_prepare function.

$query = odbc_prepare($conn, "SELECT * FROM DataModels WHERE Id = ?");

Execute Queries

Execute prepared statements with odbc_execute.

$conn = odbc_connect("CData ODBC Splunk Source","user","password"); $query = odbc_prepare($conn, "SELECT * FROM DataModels WHERE Id = ?"); $success = odbc_execute($query, array('SampleDataset'));

Execute nonparameterized queries with odbc_exec.

$conn = odbc_connect("CData ODBC Splunk Source","user","password"); $query = odbc_exec($conn, "SELECT Name, Owner FROM DataModels");

Process Results

Access a row in the result set as an array with the odbc_fetch_array function.

$conn = odbc_connect("CData ODBC Splunk data Source","user","password"); $query = odbc_exec($conn, "SELECT Name, Owner FROM DataModels"); while($row = odbc_fetch_array($query)){ echo $row["Name"] . "\n"; }

Display the result set in an HTML table with the odbc_result_all function.

$conn = odbc_connect("CData ODBC Splunk data Source","user","password"); $query = odbc_prepare($conn, "SELECT * FROM DataModels WHERE Id = ?"); $success = odbc_execute($query, array('SampleDataset')); if($success) odbc_result_all($query);

More Example Queries

You will find complete information on the driver's supported SQL in the help documentation. The code examples above are Splunk-specific adaptations of the PHP community documentation for all ODBC functions.