Splunk - Microsoft SQL Server

1         Splunk for Microsoft SQL Server, Part 1 –Demo for DB_Connect AddOn

1.1         Jeff Spencer talks

-          Splunk add-on for sql server available in splunkbase.com

-         

-          Check Splunk Add-on for Microsoft SQL Server splunk documentation

-          CIM = Common Information Model

-           

1.2         How to find db connect and How to install add ons

-          Login Splunk – Click Apps – check db_Connect for Microsoft SQL is availeble.  If not

-          Download the add-on file

-          Login splunk – Apps – Find more Apps – search the app – Click install – choose the downloaded file

-          Add-on needs restart the splunk

-          Universal forwarder should be installed in the SQL Server- … program files\SplunkUniversalForwader\etc\apps\forwarder\

-           

1.3         How to use DB_Connect

-          Login Splunk – Choose DB_Connect App – cONFIGURATION –

-         

-         

 

 

 

 

 

1.4         Perfor

1.5         A

2         A

3         A