Getting Data In

How to collect audit logs from MS SQL and MySQL DBs?

islamjy2011
New Member
 
Labels (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

1. Enable audit creation on your database system. It's different in each RDBMS so you have to work with your DB admin on that.

2. Collect the log - as far as I remember, the MSSQL stores audit logs in a separate database so you have to use dbconnect to pull those entries from the database. MySQL I think simply writes audit to a flat text log file so you'll have to set up a file monitor input.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud’s AI Assistant in Action Series: Analyzing and ...

This is the second post in our Splunk Observability Cloud’s AI Assistant in Action series, in which we look at ...

Elevate Your Organization with Splunk’s Next Platform Evolution

 Thursday, July 10, 2025  |  11AM PDT / 2PM EDT Whether you're managing complex deployments or looking to ...

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...