Getting Data In

How to monitor DB connect activities?

sekhar463
Path Finder

Hai All,

Good day,

we are using DB connect addon  to pull logs from multiple DB"s and created several inputs

we want track activity  like If any user changes anything or creating new inputs in the DB Connect app or disabling inputs 

 

any searches to check the activity for those

Labels (2)
0 Karma

wmazur-splunk
Splunk Employee
Splunk Employee
0 Karma

sekhar463
Path Finder

Hai Paul,

Thanks for this .but in this logs i didnt find any log any logs related to changes anything done from anyone for inputs

is anything like that log to monitor user activities in the DB connect

0 Karma

PaulPanther
Builder

@sekhar463 You could start with having a look into the dbx audit logs.

index=_internal source=*splunk_app_db_connect_audit_server.log OR
source=*splunk_app_db_connect_audit_command.*.log

 

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...