Solved: How to create a weekly report which covers databas... - Splunk Community

Splunk Cloud Platform

Hello all

I have installed universal forwarder on Databases and now want to create a weekly report which covers database operations, for example table deletion, database modifications etc. Do I need to install any app? Currently forwarders are configured only to collect windows events.

Regards

1 Solution

Solution

Universal forwarders would not fetch the database operations there are two ways

1) use DB connect APP if you have a heavy forwarder install on it configure the parameters and get the data into splunk try the steps in this video

https://www.youtube.com/watch?v=H3DxIMh8sb4

or the documentation

https://docs.splunk.com/Documentation/DBX/3.8.0/DeployDBX/HowSplunkDBConnectworks

2) export the Database logs to file and then read the data using UF

View solution in original post

Solution

Universal forwarders would not fetch the database operations there are two ways

1) use DB connect APP if you have a heavy forwarder install on it configure the parameters and get the data into splunk try the steps in this video

https://www.youtube.com/watch?v=H3DxIMh8sb4

or the documentation

https://docs.splunk.com/Documentation/DBX/3.8.0/DeployDBX/HowSplunkDBConnectworks

2) export the Database logs to file and then read the data using UF

Get Updates on the Splunk Community!

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Dashboard Challenge and Watch the .conf24 Global Broadcast!

The Splunk Community Dashboard Challenge is still happening, and it's not too late to enter for the week of ...