topic Re: Monitor Server Transaction Log File (.ldf) on Splunk in Getting Data In

Monitor Server Transaction Log File (.ldf) on Splunk

nerdyboy99 — Fri, 16 Apr 2021 08:12:39 GMT

How can I monitor data from .lfd files on Splunk?

Re: Monitor Server Transaction Log File (.ldf) on Splunk

venkatasri — Mon, 19 Apr 2021 00:56:14 GMT

Hi, if .ldf is a text file format then you can install a Splunk Universal forwarder on the host where file exist and configure it to ingest to Splunk Enterprise.

-----------------------------------------------------------

An upvote would be appreciated if it helps!

Re: Monitor Server Transaction Log File (.ldf) on Splunk

nerdyboy99 — Tue, 20 Apr 2021 07:16:34 GMT

Thanks for your answer. But .ldf not text file format. it's binary.

Re: Monitor Server Transaction Log File (.ldf) on Splunk

venkatasri — Tue, 20 Apr 2021 07:49:00 GMT

Hi,

There is no straight approach as Splunk prefers text and you can force it to ingest binary that doesn't really help with search. Instead a pre processed binary to text via a separate process or scripted input by Splunk which again back by a custom script which user has to write for binary conversion. Following link would direct to such solutions.

https://community.splunk.com/t5/Archive/How-to-use-splunk-for-binary-log-file/m-p/41784

____________________________

An upvote would be appreciated if it helps!