topic Is there an app to index and view MySQL logs in Splunk? in Getting Data In

Is there an app to index and view MySQL logs in Splunk?

Urao — Mon, 29 Jun 2015 13:27:41 GMT

Hi,

I would like to pull the logs and view from one of the Event Log Analyzer(ELA) into Splunk. Splunk 6.1 is the current version I am using.
MySQL is the backup logs of this ELA, so all ELA logs have to be pulled into Splunk.

Is their any app available to perform this task.

Thanks,
Uma.

Re: Is there an app to index and view MySQL logs in Splunk?

woodcock — Mon, 29 Jun 2015 14:43:11 GMT

Generally, a Splunk app is used to manipulate data after it is already in Splunk; in other words: you don't always need an app! In your case, just install a Splunk Universal Forwarder on your MySQL server and use something like this to forward your logs:

[monitor://var/log/mysql/*.log]
index=main
sourcetype=mysql