topic Re: db connect host? in Splunk Search

db connect host?

a212830 — Tue, 26 Mar 2013 19:23:39 GMT

Hi,

I want to pull in data from an Oracle database via db connect. I'm looking for some general guidance. I want to pull in data as near real-time. The data gets written to Oracle in 5-minute cycles. I was thinking about using the tail method.

The data is performance data from a 3rd party. It includes a time column (epoch time?), a system name, and a virtual machine name. The timestamp will be the same for each system, since the data is being collected at 5 minute intervals.

How do I:

1) map the host
2) separate the events since a whole bunch will have the same timestamp

In general, is there anything that I should be aware of using the tail command? I'm going to be pulling data from about 8 different tables.

Re: db connect host?

pmdba — Sat, 25 May 2013 17:41:45 GMT

Hi. There is an example of the DB Connect configuration and use of the tail command in the white paper "Real-Time Oracle 11g Log File Analysis" available at http://pmdba.files.wordpress.com/2013/05/real-time-oracle-11g-log-file-analysis.pdf. Hopefully this will help. A lot of other data input methods are also described.

Re: db connect host?

ruhail_butt — Fri, 10 Apr 2015 17:20:42 GMT

The *.pdf above is not available anymore..

Re: db connect host?

mail2pufta — Thu, 30 Jul 2015 22:52:48 GMT

how's this: https://pmdba.files.wordpress.com/2013/12/real-time-oracle-11g-log-file-analysis2.pdf

Re: db connect host?

pmdba — Fri, 31 Jul 2015 12:53:10 GMT

You can also find it here: https://splunkbase.splunk.com/app/1538/