Solved: How to create a weekly report which covers databas... - Splunk Community

Splunk Cloud Platform

Hello all

I have installed universal forwarder on Databases and now want to create a weekly report which covers database operations, for example table deletion, database modifications etc. Do I need to install any app? Currently forwarders are configured only to collect windows events.

Regards

1 Solution

Solution

Universal forwarders would not fetch the database operations there are two ways

1) use DB connect APP if you have a heavy forwarder install on it configure the parameters and get the data into splunk try the steps in this video

https://www.youtube.com/watch?v=H3DxIMh8sb4

or the documentation

https://docs.splunk.com/Documentation/DBX/3.8.0/DeployDBX/HowSplunkDBConnectworks

2) export the Database logs to file and then read the data using UF

View solution in original post

Solution

Universal forwarders would not fetch the database operations there are two ways

1) use DB connect APP if you have a heavy forwarder install on it configure the parameters and get the data into splunk try the steps in this video

https://www.youtube.com/watch?v=H3DxIMh8sb4

or the documentation

https://docs.splunk.com/Documentation/DBX/3.8.0/DeployDBX/HowSplunkDBConnectworks

2) export the Database logs to file and then read the data using UF

Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...