How to monitor DB connect activities?

[sekhar463]

Hai All,

Good day,

we are using DB connect addon  to pull logs from multiple DB"s and created several inputs

we want track activity  like If any user changes anything or creating new inputs in the DB Connect app or disabling inputs 

any searches to check the activity for those

[wmazur-splunk]

https://www.splunk.com/en_us/blog/platform/splunking-your-conf-files-how-to-audit-configuration-chan...

TL;DR: index="_configtracker" data.path=*splunk_app_db_connect*

[sekhar463]

Hai Paul,

Thanks for this .but in this logs i didnt find any log any logs related to changes anything done from anyone for inputs

is anything like that log to monitor user activities in the DB connect

[PaulPanther]

@sekhar463 You could start with having a look into the dbx audit logs.

index=_internal source=*splunk_app_db_connect_audit_server.log OR
source=*splunk_app_db_connect_audit_command.*.log