All Apps and Add-ons

Splunking Oracle AWR and ASM data

nbharadwaj
Path Finder

Oracle contains a lot of information about processing/performance and storage.

1) Oracle Automatic Workload Repository (AWR) has processing/performance data. Currently we have a cron job that queries Oracle system tables, and dumps the output into a file in a tabular format, much like a SQL command output. This is per hour.

2) Oracle Automatic Storage Management (ASM) has storage usage data. Currently we have a cron job that queries Oracle system tables, and dumps the output into a file in a tabular format, much like a SQL command output. This is per day.

Looking for best practice around how to splunk all this data. Ideally the file approach would be best- and potentially the SQL scripts could be changed to output in a specific format. Has anyone splunked any of this data successfully?

Tags (1)

oldmonk7
New Member

Hi,

I also want to know if splunk can use Oracle AWR report html files. I tried to load but did not see any result. Can someone has tried this.

0 Karma

tpaulsen
Contributor

Hey, we were wondering the same question recently. I think the main problem here is that the AWR output is already a long report. Splunk would need not only to collect the several tables as multiline events, but also would have to create fields out of each multiline event tab. Difficult one.

Any suggestions, please?

Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...