Trying to get data/events directly from a third-party application database

[gsmith]

Hello && Welcome @lmattos90

I’m assuming this is metric in the SQL server?

@lmattos90

I found out that the developer decided to not do it, so, the best way that I could retrieve this data will be accessing the database directly.

Graylog receives data, as for getting a connection to a SQL data base you may need something like Zabbix. Grafana, LibreNMS, etc…

@lmattos90

What would be the best approach in your opinion? for instance, execute a SQL script to dump the data in a folder and use a “parser” like FileBeat to collect the data and send it to Graylog?

Depends, if you execute a dump I don’t know how the log shipper can read those tables in the .sql file.

If the SQL server in questioned is on Windows OS then I would use something like MetricBeat and/or Winlogbeat depending what data you want to trend. I have actually had old dump log files and used Nxlog to scan the whole file and send it to Graylog. Most Beat/Nxlog shipper have setting to scan log files from the beginning.

With all that being said, take a look at these posts.

• Sending in log data

• https://www.graylog.org/post/log-formats-a-complete-guide

The last link towards the bottom page tells in a brief description about ODBC, perhaps that maybe of interest.