Getting Data In

How to monitor DB connect activities?

sekhar463
Path Finder

Hai All,

Good day,

we are using DB connect addon  to pull logs from multiple DB"s and created several inputs

we want track activity  like If any user changes anything or creating new inputs in the DB Connect app or disabling inputs 

 

any searches to check the activity for those

Labels (2)
0 Karma

wmazur-splunk
Splunk Employee
Splunk Employee
0 Karma

sekhar463
Path Finder

Hai Paul,

Thanks for this .but in this logs i didnt find any log any logs related to changes anything done from anyone for inputs

is anything like that log to monitor user activities in the DB connect

0 Karma

PaulPanther
Builder

@sekhar463 You could start with having a look into the dbx audit logs.

index=_internal source=*splunk_app_db_connect_audit_server.log OR
source=*splunk_app_db_connect_audit_command.*.log

 

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In November, the Splunk Threat Research Team had one release of new security content via the Enterprise ...

Index This | Divide 100 by half. What do you get?

November 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

❄️ Celebrate the season with our December lineup of Community Office Hours, Tech Talks, and Webinars! ...