Getting Data In

Is there a way to connect to a local Microsoft Access Database using the universal forwarder?

tylerhardison
New Member

I have an application that logs its audit logs to a local Microsoft Access Database. I have an ODBC connection ready, but I'm not sure how to connect the Universal Forwarder to it.

Is this a job for Python?

0 Karma

darrend
Path Finder

Hi

I don't know if this helps, but we are doing exactly the same for a customer at the moment, but have ruled out the database connection using DBX, instead we are setting up something to receive the radius logs, IAS in this customers scenario. The Direct access server is then sending it's logs via radius logging. We are then writing the logs to disk using IAS and reading them in with a simple file monitor in the UF.

I hope this helps you.

Thanks
Darren

0 Karma

mchang_splunk
Splunk Employee
Splunk Employee

You may install DB Connect app to connect Access via ODBC.
This is unsupported but it should work.
http://docs.splunk.com/Documentation/DBX/latest/DeployDBX/Deploymentrequirements#Supported_databases

splunkIT
Splunk Employee
Splunk Employee

DB Connect app does not run on universal forwarder. Heavy forwarder is required.

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Does DB Connect run on a Universal Forwarder?

0 Karma

tylerhardison
New Member

I believe it does not. I could install a heavy forwarder I guess.

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...