Splunk Add-on for Microsoft SQL Server

The Splunk Add-on for Microsoft SQL Server allows a Splunk Enterprise administrator to collect system performance, SQL server performance, log, audit, and status data from MSSQL Server deployments. This add-on leverages Splunk DB Connect, Splunk Windows Performance monitoring, and file monitoring to collect relevant data. Through log file monitoring and field extraction, the database administrator can correlate events and create alerts and dashboards to track what errors, problems, or incidents happen to the database in real time. This add-on provides the inputs and CIM-compatible knowledge to use with other Splunk Enterprise apps, such as Splunk App for Enterprise Security and Splunk App for PCI Compliance. This add-on must be installed on a Windows instance of Splunk Enterprise for data collection. The add-on is platform independent for indexers and search heads.