https://community.splunk.com/t5/Getting-Data-In/encoded-data-over-tcp/m-p/81060#M16718 <P>Hi I am able to send log4j log data to splunk over tcp network but the data in splunk is not human readable.(see below) This is totally different than the original log data. Can anyone shed some light on this? Thanks! </P> <P><STRONG>log4j.properties</STRONG><BR /> log4j.rootCategory=INFO, socket<BR /> log4j.appender.socket=org.apache.log4j.net.SocketAppender<BR /> log4j.appender.socket.port=33333<BR /> log4j.appender.socket.remoteHost=myLinuxServer1</P> <P><STRONG>tcp:33333</STRONG></P> <PRE><CODE>\xAC\xED\x00\x5sr\x00!org.apache.log4j.spi.LoggingEvent\xF3\xF2\xB9#t\xB\xB5?\x3\x00 Z\x00\x15mdcCopyLookupRequiredZ\x00\x11ndcLookupRequiredJ\x00 timeStampL\x00\xCcategoryNamet\x00\x12Ljava/lang/String;L\x00\xClocationInfot\x00#Lorg/apache/log4j/spi/LocationInfo;L\x00\x7mdcCopyt\x00\x15Ljava/util/Hashtable;L\x00\x3ndcq\x00~\x00\x1L\x00\xFrenderedMessageq\x00~\x00\x1L\x00 </CODE></PRE> Thu, 21 Jun 2012 16:39:46 GMT shangshin 2012-06-21T16:39:46Z https://community.splunk.com/t5/Getting-Data-In/encoded-data-over-tcp/m-p/81060#M16718 <P>Hi I am able to send log4j log data to splunk over tcp network but the data in splunk is not human readable.(see below) This is totally different than the original log data. Can anyone shed some light on this? Thanks! </P> <P><STRONG>log4j.properties</STRONG><BR /> log4j.rootCategory=INFO, socket<BR /> log4j.appender.socket=org.apache.log4j.net.SocketAppender<BR /> log4j.appender.socket.port=33333<BR /> log4j.appender.socket.remoteHost=myLinuxServer1</P> <P><STRONG>tcp:33333</STRONG></P> <PRE><CODE>\xAC\xED\x00\x5sr\x00!org.apache.log4j.spi.LoggingEvent\xF3\xF2\xB9#t\xB\xB5?\x3\x00 Z\x00\x15mdcCopyLookupRequiredZ\x00\x11ndcLookupRequiredJ\x00 timeStampL\x00\xCcategoryNamet\x00\x12Ljava/lang/String;L\x00\xClocationInfot\x00#Lorg/apache/log4j/spi/LocationInfo;L\x00\x7mdcCopyt\x00\x15Ljava/util/Hashtable;L\x00\x3ndcq\x00~\x00\x1L\x00\xFrenderedMessageq\x00~\x00\x1L\x00 </CODE></PRE> Thu, 21 Jun 2012 16:39:46 GMT https://community.splunk.com/t5/Getting-Data-In/encoded-data-over-tcp/m-p/81060#M16718 shangshin 2012-06-21T16:39:46Z https://community.splunk.com/t5/Getting-Data-In/encoded-data-over-tcp/m-p/81061#M16719 <P>I can only guess that the character encoding is not UTF-8. See <A href="http://answers.splunk.com/answers/129428/character-encoding-when-sending-to-tcp-port">this answer</A> for more information.</P> Mon, 31 Mar 2014 12:17:11 GMT https://community.splunk.com/t5/Getting-Data-In/encoded-data-over-tcp/m-p/81061#M16719 helge 2014-03-31T12:17:11Z