topic Re: How can Splunk read logs from database (MS SQL and Oracle)? in All Apps and Add-ons

How can Splunk read logs from database (MS SQL and Oracle)?

humidisplunk — Wed, 18 Feb 2015 13:12:47 GMT

Re: How can Splunk read logs from database (MS SQL and Oracle)?

mzorzi — Wed, 18 Feb 2015 14:25:19 GMT

If you mean the log files in the filesystems, you can install a forwarder and threat it as a normal file.
If instead these logs are inside the database, you should use the dbx app.

Re: How can Splunk read logs from database (MS SQL and Oracle)?

treinke — Wed, 18 Feb 2015 14:28:13 GMT

Are you talking about C2 audits or getting data out of the databases in to Splunk? Can you provide a little more detail about your request?

Re: How can Splunk read logs from database (MS SQL and Oracle)?

ppablo — Thu, 19 Feb 2015 01:30:44 GMT

Information on the Splunk DB Connect app recommended by @mzorzi can be found here https://apps.splunk.com/app/958/

Re: How can Splunk read logs from database (MS SQL and Oracle)?

ppablo — Thu, 19 Feb 2015 01:33:03 GMT

As Anthony Reinke suggested, please provide much more details in your posts to get more complete answers in this forum. Otherwise, users have to keep asking you more questions to get more details rather than giving you straightforward answers.

Re: How can Splunk read logs from database (MS SQL and Oracle)?

pmdba — Thu, 19 Feb 2015 17:25:10 GMT

A basic tutorial on configuring Splunk monitoring for Oracle can be found here: https://apps.splunk.com/app/1538.

Re: How can Splunk read logs from database (MS SQL and Oracle)?

saurabh_tek — Mon, 24 Oct 2016 07:34:40 GMT

@ppablo - i need database logs like changes done on the tables, who accessed the database etc...
(not the data inside DB), i am using SQL addon but that is not collecting these logs

i have seen on SQL management suite that they are generating. can you suggest how can i start collecting them into splunk ?