topic Re: How do we know which logs or if data does't coming from DB connect to Splunk? in Getting Data In

How do we know which logs or if data does't coming from DB connect to Splunk?

sekhar463 — Fri, 20 Jan 2023 15:45:57 GMT

we are using DB connect addon to get data from Oracle DB

while searching the data was stopped coming but inputs are working while executing in the addon

how we can monitor the status data was stopped

Re: How do we know which logs or if data does't coming from DB connect to Splunk?

richgalloway — Fri, 20 Jan 2023 19:24:00 GMT

DB Connect has a few log files. They are splunk_app_db_connect_server.log, splunk_app_db_connect_job_metrics.log, splunk_app_db_connect_dbx.log, and splunk_app_db_connect_audit_server.log. You can access them from the UI using

index=_internal source=*splunk_app_db_connect*.log

Some docs that be useful:

https://docs.splunk.com/Documentation/DBX/3.11.1/DeployDBX/Monitordatabaseconnectionhealth

https://community.splunk.com/t5/Getting-Data-In/How-do-we-know-which-logs-or-if-data-does-t-coming-from-DB/m-p/627721#M107731

Re: How do we know which logs or if data does't coming from DB connect to Splunk?

isoutamo — Fri, 20 Jan 2023 21:44:30 GMT

DB Connect has some monitoring dashboards which you could use to check the status. You should just install it to some SH a configure connections without inputs. Then select those monitoring dashboards and if needed create some alerts based on those.
r. Ismo