Getting Data In

Using DBConnect to pull logs from an application's internal database.

adnankhan5133
Communicator

Is it possible to use DBConnect to pull logs from an application's internal database? The situation we have here is that one of our MDM applications (Informatica) logs all of their audit trail records into a relational database. This isn't like an Oracle database that can be queried via SQL - it's internal to Informatica and can only be accessed via the Informatica UI. Informatica is installed on-prem, so we aren't using a cloud-based version.

With that said, how would we go about pulling the audit logs into Splunk? Would DBConnect have a way of connecting to this internal database, or would another method need to be used here?

Labels (3)
Tags (1)
0 Karma

anilchaithu
Builder

@adnankhan5133 

I am sure these audit logs are written to a log file before uploading to an internal database.

Does your team has access to this server? If you can identify the log path (location of the logs on the server), either you OR server team can install splunk UF on the server and can forward the data to splunk indexers.

Other option would be calling REST end point for this application (if available) using splunk modular input.

Hope this helps

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!