My Splunk is installed in one server and my Database's are deployed on other server,in order to connect these two what would i require only Splunk DBconnect is enough or should i use Universal Forwarder also.
My Splunk is installed on windows server 2003 and my Database is on Linux Server.
Please Shed some Light on this,
Any Help is appreciated.
Use both. DB Connect will get data out of your database into Splunk. The Universal Forwarder will pass on information about the server itself (disk usage, CPU usage, logs, etc.).
so the DBconnect will be installed on windows where my Splunk is installed and the forwarder will be installed on the server where my DB is located.
Can i use only Splunk DB Connect which will gather data from DB,as i don't need data about server(disk usage,CPU usage etc).
I only want the data from Database which is located on some other server.
You'll just need to install the DB Connect application on your Windows Splunk indexer and it will be able to connect to the database and run queries assuming the firewalls allow the access.