MS SQL Audit Logs DB Connect vs UF Event Logs

mikefg · ‎01-13-2020

I will be working on gathering MS SQL audit logs and I should have the option of using DB Connect or using the UF to collect from event logs. To maintain best SQL performance is either a better option?

Splunk 7.3.3, Windows Server 2016, MS SQL 2016 SP2. Any differences for Server and SQL 2019? We'll be migrating to 2019 in the coming months.

ojay · ‎02-09-2023

What was your conclusion? Which method did you use?

MS SQL Audit Logs DB Connect vs UF Event Logs

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

Announcing Modern Navigation: A New Era of Splunk User Experience

Join the Conversation

MS SQL Audit Logs DB Connect vs UF Event Logs

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

Announcing Modern Navigation: A New Era of Splunk User Experience