topic Re: Splunk for SQL App (i.e. database activity monitoring) in Getting Data In

Splunk for SQL App (i.e. database activity monitoring)

maverick — Tue, 21 Sep 2010 23:23:29 GMT

Is Splunk planning to create and/or provide a general umbrella-ish Splunk for SQL App (or a solution suite) for monitoring the various databases in a typical IT environment, the accesses being made to them, the activities conducted, queries being executed, etc, regardless of it being MSSQL, Oracle, DB2, mysql, or other, or ALL of these simultaneously?

If so, when can we expect that app to be available?

Re: Splunk for SQL App (i.e. database activity monitoring)

bvamos — Tue, 20 Dec 2011 19:12:03 GMT

Hi,

I've just uploaded a new App (Splunk for Oracle Audit Trails) what can parse and analyze Oracle Audit Trails sent via syslog. In the near future it will work with AUD$ table or any other audit view. This can be the one of the components of an SQL Application Suite.
Unfortunately this App is not yet available in SplunkBase but hopefully will be soon. Check out my profile later...

Re: Splunk for SQL App (i.e. database activity monitoring)

bvamos — Thu, 22 Dec 2011 20:50:17 GMT

Splunk for Oracle Audit Trails is available. Download from: http://splunk-base.splunk.com/apps/36943/oracle-audit-trail

Re: Splunk for SQL App (i.e. database activity monitoring)

erik_extrahop — Wed, 19 Sep 2012 18:48:53 GMT

ExtraHop now has a Splunkbase app for database monitoring. Databases supported are Oracle, Microsoft SQL, Informix, DB2, Sybase and Sybase IQ, Postgres, and MySql.
http://splunk-base.splunk.com/apps/53757/extrahop.
Disclaimer: the Splunk App does require the ExtraHop APM platform to be installed.

Re: Splunk for SQL App (i.e. database activity monitoring)

halr9000 — Fri, 08 Aug 2014 13:11:16 GMT

Here are two more relevant apps:

Re: Splunk for SQL App (i.e. database activity monitoring)

halr9000 — Fri, 08 Aug 2014 13:12:00 GMT

Marking this question as answered for posterity.

Re: Splunk for SQL App (i.e. database activity monitoring)

carasso — Fri, 08 Aug 2014 17:46:24 GMT

Erik -- a search of "sql" on apps.splunk.com didn't return your app. Users might find your app better if you throw in a few relevant keywords into your apps description: Oracle, Microsoft SQL, Informix, DB2, Sybase and Sybase IQ, Postgres, and MySql.

Re: Splunk for SQL App (i.e. database activity monitoring)

carasso — Fri, 08 Aug 2014 17:50:41 GMT

Any updates? it's been 2.5 years. thx