Configure monitor inputs and Windows Performance Monitoring inputs for the Splunk Add-on for Microsoft SQL Server
The Splunk Add-on for Microsoft SQL Server allows you to collect a variety of log and performance data from your Microsoft SQL Server instances. The
default\inputs.conf file has a complete set of input stanzas that you can use as a basis for your local configurations.
The following configuration instructions assume that you have installed the Splunk Add-on for Microsoft SQL Server on forwarders installed directly on your machines running Microsoft SQL Server.
- Copy the contents to
Configure error and agent log file monitoring
Configure monitoring of error and agent logs using Splunk File Monitoring.
Prerequisite: The server agent log file may not exist if the SQL Server Agent Service has never started. Be sure to start the agent first before attempting to configure a monitor input.
- If necessary, edit the file path of the inputs to match the actual location of the log files in your environment.
- Enable the inputs by changing
disabled = 1to
disabled = 0.
It is also possible to configure these inputs via Splunk Web on your heavy forwarder. For more information about configuring file monitoring on Splunk Web, see Monitor files and directories with Splunk Web in the Getting Data In manual, part of the Splunk Enterprise documentation.
Configure performance monitoring
Configure monitoring of your Microsoft SQL Server instances and the Windows systems running them using Windows Performance Monitoring.
- Enable performance monitoring for the tasks you are interested in by changing
disabled = 1to
disabled = 0for those stanzas.
For more details about each performance monitoring task, refer to the Windows and SQL Server performance data section of the source types reference page.
Install the Splunk Add-on for Microsoft SQL Server
Configure DB Connect v3 inputs for the Splunk Add-on for Microsoft SQL Server
This documentation applies to the following versions of Splunk® Supported Add-ons: released