The Splunk Add-on for Microsoft SQL Server allows a Splunk software administrator to collect system performance, SQL server performance, log, audit, and status data from Microsoft SQL Server deployments. The Splunk Add-on for Microsoft SQL Server leverages Splunk DB Connect, Splunk Windows Performance monitoring, and file monitoring to collect relevant MSSQL data. Through log file monitoring and field extraction, the database administrator can correlate events and create alerts and dashboards to track what errors, problems, or incidents happen to the database in real time. This add-on provides the inputs and CIM-compatible knowledge to use with other Splunk Enterprise apps, such as Splunk Enterprise Security, the Splunk App for PCI Compliance, and Splunk IT Service Intelligence. This add-on must be installed on a Windows instance of the Splunk platform for local monitoring. The add-on is platform independent for index and search time functions, as well as for DB Connect inputs.