Hi,
I would like to pull the logs and view from one of the Event Log Analyzer(ELA) into Splunk. Splunk 6.1 is the current version I am using.
MySQL is the backup logs of this ELA, so all ELA logs have to be pulled into Splunk.
Is their any app available to perform this task.
Thanks,
Uma.
Generally, a Splunk app
is used to manipulate data after it is already in Splunk; in other words: you don't always need an app! In your case, just install a Splunk Universal Forwarder
on your MySQL server and use something like this to forward your logs:
[monitor://var/log/mysql/*.log]
index=main
sourcetype=mysql