We are attempting to integrate a QuickFill (QF) database with Splunk for reporting purposes; by default QF prefers ODBC for database connections. Our QF database lives on one server while the Splunk indexer lives on another server.
Everything I've found about ODBC so far seems to indicate that you can only connect Splunk to an ODBC database that lives on the same server as the Splunk indexer itself. Is this true, or is there something I'm missing? Do I need a forwarder set up on the QF server to plug into its database and then push the data to the indexer (rather than having the indexer pull the data)?