Database Connection

[harshavrath]

Hi
My Splunk is installed in one server and my Database's are deployed on other server,in order to connect these two what would i require only Splunk DBconnect is enough or should i use Universal Forwarder also.

My Splunk is installed on windows server 2003 and my Database is on Linux Server.

Please Shed some Light on this,

Any Help is appreciated.

Cheers.

[kaufmanm]

You'll just need to install the DB Connect application on your Windows Splunk indexer and it will be able to connect to the database and run queries assuming the firewalls allow the access.

[richgalloway · Accepted solution]

Use both. DB Connect will get data out of your database into Splunk. The Universal Forwarder will pass on information about the server itself (disk usage, CPU usage, logs, etc.).

[harshavrath]

how will i configure Splunk DBConnect to read/connect to a database which is situated on some other server.?

[richgalloway]

Yes. Use of Splunk Universal Forwarder is optional.

[harshavrath]

Can i use only Splunk DB Connect which will gather data from DB,as i don't need data about server(disk usage,CPU usage etc).
I only want the data from Database which is located on some other server.

[richgalloway]

That is correct.

[MoizLokhandwala]

Can I install and configure DB Connect on the universal forwarder ?

[harshavrath]

so the DBconnect will be installed on windows where my Splunk is installed and the forwarder will be installed on the server where my DB is located.