topic Re: Can Splunk monitor MSSQL database content in All Apps and Add-ons

Can Splunk monitor MSSQL database content

BunnyHop — Thu, 13 May 2010 02:38:05 GMT

I have a MSSQL database that I want to monitor content and indexed by Splunk. I understand there's a 3.x app for this and I'm wondering if there's one that's for 4.x.

Re: Can Splunk monitor MSSQL database content

gkanapathy — Thu, 13 May 2010 03:27:26 GMT

There isn't exactly a 3.x app for this, but there's is a sample database input polling script that will work for MSSQL. It's just a perl script that polls the DB and provides the output to Splunk, and it should work just as well in 4.x.

Re: Can Splunk monitor MSSQL database content

nchoe123 — Wed, 24 Aug 2011 15:10:40 GMT

Yes, but it's fairly crude; I've heard that it's going to make it into a future version of Splunk.

For now, the python script can get data out of MS SQL and into Splunk, though there's some data massaging that may be required for line breaks etc.

Re: Can Splunk monitor MSSQL database content

catch_mili — Mon, 29 Oct 2012 10:47:04 GMT

@gkanapathy
I want to monitor Ms-sql database & Oracle database, but there we disabled logs from both the databases for performance issue. Still we can monitor database using the mentioned script, If yes then please send me script.

Regards,
catch_mili

Re: Can Splunk monitor MSSQL database content

wbfoxii — Tue, 19 Nov 2013 15:58:39 GMT

Splunk DB Connect is the way to go!