Getting Data In

How to monitor DB connect activities?

sekhar463
Path Finder

Hai All,

Good day,

we are using DB connect addon  to pull logs from multiple DB"s and created several inputs

we want track activity  like If any user changes anything or creating new inputs in the DB Connect app or disabling inputs 

 

any searches to check the activity for those

Labels (2)
0 Karma

wmazur-splunk
Splunk Employee
Splunk Employee
0 Karma

sekhar463
Path Finder

Hai Paul,

Thanks for this .but in this logs i didnt find any log any logs related to changes anything done from anyone for inputs

is anything like that log to monitor user activities in the DB connect

0 Karma

PaulPanther
Motivator

@sekhar463 You could start with having a look into the dbx audit logs.

index=_internal source=*splunk_app_db_connect_audit_server.log OR
source=*splunk_app_db_connect_audit_command.*.log

 

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...