Hi,
I'm a little confused which app/add-on I should install.
I have a customer like to monitor their production SQL server instances.
However I saw MS SQL app is in abandonded status from its page. (Sorry... any replacement? Can I still use it? )
Meanwhile, I looked into MS SQL add-on but I don't feel it has dashboard for SQL server monitoring/reporting.
From description, it's more like providing data for PCI/security. Our customer doesn't have Splunk security package.
I read some instructions of these apps how to enable extra audit logs. However, I didn't get how to ingest the audit log.
It's done by performing/WMI? Or I need to add audit log path and tell Splunk correct source type?
Many thanks!
↧