Splunk Searches | A collection of useful Splunk SPL

Splunk Search for Details on Active Database Connected (DBX) Connections Copy


				| rest splunk_server=local /servicesNS/-/splunk_app_db_connect/configs/conf-db_connections | search [ | rest splunk_server=local /servicesNS/-/splunk_app_db_connect/configs/conf-db_inputs | search disabled=0 | stats count by connection | fields - count | rename connection as title | format ] | table title connection_type database host identity port

0 comments

[0]

Splunk Search for Database Connect (DBX) Inputs Copy


				| rest splunk_server=local /servicesNS/-/splunk_app_db_connect/configs/conf-db_inputs

0 comments

[0]

Splunk Search for Database Connect (DBX) Connections by Identity Username Copy


				| rest splunk_server=local /servicesNS/-/splunk_app_db_connect/configs/conf-identities 
| rename title as user_title
| map [ | rest splunk_server=local /servicesNS/-/splunk_app_db_connect/configs/conf-db_connections | search disabled=0 AND identity="$user_title$" | eval username="$username$", domain_name="$domain_name$" ]
| table title connection_type database host identity username domain_name

0 comments

[0]

Splunk Search for Database Connect (DBX) Identities Copy


				| rest splunk_server=local /servicesNS/-/splunk_app_db_connect/configs/conf-identities

0 comments

[0]

Splunk Search for Database Connect (DBX) Connections Copy


				| rest splunk_server=local /servicesNS/-/splunk_app_db_connect/configs/conf-db_connections

0 comments

[0]