All Apps and Add-ons

Can Splunk read SQL Server audit .sqlaudit log files ?

alow_mas
New Member

Am logging all the SQL Server audit logs to the .sqlaudit files. Can the Splunk agent forwarder read such files and forward them to the indexer ?

Tks

0 Karma

chrismewett
Explorer

three years later, there's a different solution:
Splunk Add-on for Microsoft SQL Server - docs here:

0 Karma

s2_splunk
Splunk Employee
Splunk Employee

This app may be of interest to you. Docs here.

0 Karma
Get Updates on the Splunk Community!

Leveraging Detections from the Splunk Threat Research Team & Cisco Talos

  Now On Demand  Stay ahead of today’s evolving threats with the combined power of the Splunk Threat Research ...

New in Splunk Observability Cloud: Automated Archiving for Unused Metrics

Automated Archival is a new capability within Metrics Management; which is a robust usage & cost optimization ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...