Hi,
I have installed MySQL and a Splunk Forwarder on the same host, but with different users in Linux. As I'm doing it for the first time, can someone guide me on the basic configuration steps I need to follow?
I have already followed the steps as per:
http://docs.splunk.com/Documentation/DBX/2.0.4/DeployDBX/AboutSplunkDBConnect
d
I don't know your architecture, so I can't do much but speculate. You'll want to install the DBX app on your search head, or install a heavy forwarder on either your mysql machine or stand up a heavy forwarder machine. Have a look at this video, it's very informational - https://www.youtube.com/watch?v=-DdPrMCdpAY
Scenario is:
Forwarder is on my linux box on user: ABC
MySQL is on my linux box on user : XYZ
I need to forward data to Splunk UI which is running on a separate system.
Verified with normal logs forwarding and its working fine. But its not working in case of Splunk_app_db_connect 2.
May be I am doing something wrong in configuration files e.g. java.conf, database_type.conf, databases.conf, inputs.conf,...
Please guide me the basic steps for the configuration.