topic Re: Reading Log file in binary format into splunk in Getting Data In

Reading Log file in binary format into splunk

dinesh_joshy — Tue, 15 Apr 2014 07:21:26 GMT

Hi ,

Am working with splunk 6.0.2. I have a dataset consists of all requests made to particular website. In order to reduce both the size of the logs and the analysis time the access logs were converted to a binary format. Each entry in the binary log is a fixed size and represents a single request to the site.
I have selected "files&directories" to upload the file. With 'Skip Preview' option, i got a message data uploaded successfully.
Am struggling while i need to see the data summary.
Anyone direct me the way i need to follow with this dataset. Should i need to go with some other option ?

Regards
Dinesh

Re: Reading Log file in binary format into splunk

martin_mueller — Tue, 15 Apr 2014 08:27:24 GMT

The best way I see would be to ingest the log in UTF-8 rather than binary. Feel free to gzip it in order to conserve space, Splunk understands common archive formats.

Re: Reading Log file in binary format into splunk

dinesh_joshy — Tue, 15 Apr 2014 09:41:48 GMT

Thanks much for your response, martin. I ll try to do that.