I'm creating an alert to notify oracle database administrators when a db_connect connection has failed. I have created the query to return the name of the failed connection using the splunk _internal logs. However, I would like to include the hostname and default database that are defined in the connection. I have not been able to locate logs with the connection host and default database using the connection name as the search criteria.
Is there a REST or CURL command available that retrieves the host and default database (using the connection name as input) that I can use to join with my completed query that retrieves failed connections?
Thanks In Advance.
