https://community.splunk.com/t5/Getting-Data-In/How-to-collect-audit-logs-from-MS-SQL-and-MySQL-DBs/m-p/700176#M115956 <P>1. Enable audit creation on your database system. It's different in each RDBMS so you have to work with your DB admin on that.</P><P>2. Collect the log - as far as I remember, the MSSQL stores audit logs in a separate database so you have to use dbconnect to pull those entries from the database. MySQL I think simply writes audit to a flat text log file so you'll have to set up a file monitor input.</P> Thu, 26 Sep 2024 08:53:53 GMT PickleRick 2024-09-26T08:53:53Z https://community.splunk.com/t5/Getting-Data-In/How-to-collect-audit-logs-from-MS-SQL-and-MySQL-DBs/m-p/700172#M115955 Thu, 26 Sep 2024 08:14:50 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-collect-audit-logs-from-MS-SQL-and-MySQL-DBs/m-p/700172#M115955 islamjy2011 2024-09-26T08:14:50Z https://community.splunk.com/t5/Getting-Data-In/How-to-collect-audit-logs-from-MS-SQL-and-MySQL-DBs/m-p/700176#M115956 <P>1. Enable audit creation on your database system. It's different in each RDBMS so you have to work with your DB admin on that.</P><P>2. Collect the log - as far as I remember, the MSSQL stores audit logs in a separate database so you have to use dbconnect to pull those entries from the database. MySQL I think simply writes audit to a flat text log file so you'll have to set up a file monitor input.</P> Thu, 26 Sep 2024 08:53:53 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-collect-audit-logs-from-MS-SQL-and-MySQL-DBs/m-p/700176#M115956 PickleRick 2024-09-26T08:53:53Z