• Add Videos
  • View All

Latest Activity

Colin Durrant posted a status
"happy to host a wordpress based website for free for you if that helps."
Jun 17, 2015
Travis Marlette replied to colm kenny's discussion New to Splunk
"I don't know if 'should' is the appropriate term there. This depends entirely on what you want to see, and one of the difficult parts about splunk is getting that criteria.  Let me ask you some questions: 1. Do you have a use…"
Apr 30, 2015
Deb Heller updated their profile
Apr 29, 2015
Profile Iconshane Armbrister, Travis Marlette, Underforge and 15 more joined splunkninja
Apr 29, 2015
Charles Diggs is now a member of splunkninja
Feb 28, 2015
Profile IconRobert Ayers and Mark Ulmer, CISSP joined splunkninja
May 20, 2014
Mike Hartford posted a status
"Hi Michael, I would like to watch your video "Random thoughts about Windows, WMI, Event Logs & Splunk" it is marked Private."
May 1, 2014
Profile IconBudiyanto and Robin Smith joined splunkninja
Mar 31, 2014
Hi, i wanna ask if anyone has experience in get data from all windows server managed by SCOM (System Center Operations Manager)?

Please guide me. Thanks

Views: 925

Reply to This

Replies to This Discussion


Is your hope to pull all the event data directly from SCOM? Or are do you just need to get eventlogs from each server?
Hi Michael, thanks for reply,

we need to pull all the event data directly from SCOM.

Our client have many server that monitored by SCOM

They really want to use Splunk to get the all server data that had pulled by SCOM.

They want to combine, not replace the SCOM with splunk.

Any clue for this?

Any answer for this topic?
I don't know customers who are pulling SCOM alert data into Splunk specifically, but I am familiar with other customers writing a file as an output which is then ingested by SCOM as one way. This won't persist alert data however. A second way, and one more preferred requires SCOM R2 to enable objects in SCOM to search Splunk using a search string. Results populate in SCOM, and everyone is happy. I am sure that Splunk can interact with the SCOM API, though I have not done it yet myself. What version of SCOM are you using?
I use SCOM R2.
I think about using script to mining data from SCOM database (MSSQL Server) and get the specific table that SCOM use to record the log or data about servers it manage, but not to sure if this can done, since i don't know exactly how to mining data from database server using bat script. If this method is right, can anyone share about this? Thanks


© 2017   Created by Michael Wilde.   Powered by

Badges  |  Report an Issue  |  Terms of Service