Can Splunk provide solutions for monitoring whether a database connection is up or not in realtime and trigger alerts

[sudhasubramania]

I have installed splunk enterprise and splunk db connect on top of it. It has an option for Health monitoring the connections. I want to trigger an alert email whenever my database connection is down realtime. Is it possible using Splunk db connect or any other Splunk app provides such facility.

[adonio · Accepted solution]

this is not a full answer,
seen it done leveraging splunk internal logs.
i dont remember from the top of my head, but if you will look in the data, there are connections related events with good data regarding last connection, and other factors.
The group i worked with used to monitor it and alert if no data comes in to splunk -> bad connection or DB down. also they tracked the connections and viewed anomalies
hope it helps

[sudhasubramania]

Thanks for the help.