SPLUNK and SCOM ACS Integration

[opsec]

Is there a SPLUNK forwarder or agent to collect logs from Microsoft SCOM ACS database? If so, it the solution filly supported by SPLUNK? Please help. Thanks.

[MarioM]

To my knowledge there isn't.

Splunk forwarder can collect via tcp,udp,wmi,local files but for database you will need a script and the forwarder will collect the stdout.

The following (only community supported) app Splunk for SCOM uses powershell script to collect infos from SCOM.