topic Re: Install UF/HF in Unisys Mainframe in Installation

Install UF/HF in Unisys Mainframe

SplunkDash — Fri, 04 Jun 2021 17:52:28 GMT

Hi,

So far my know, Unisys Univac Mainframe series support Linux/Windows. Just wonder if we can install UF/HF in Unisys Univac Mainframe SPAR. Any help would be appreciated.

Thank you and Regards,

Obaidul

Re: Install UF/HF in Unisys Mainframe

richgalloway — Sat, 05 Jun 2021 12:20:01 GMT

If the Univac is actually *running* Linux (not just "support") and the CPU type is one Splunk will run on then you should be able to install a forwarder on the mainframe. To minimize potential problems, start with the UF.

If it doesn't run then perhaps you can write some code to forward events from the mainframe to Splunk using HEC.

Re: Install UF/HF in Unisys Mainframe

SplunkDash — Tue, 08 Jun 2021 16:15:49 GMT

Thank you so much for you quick response. But how does it work? Like ......write codes and place the codes in Unisys Univac Mainframe and then use HTTP Event Collector to send data to Splunk. Do I need to configure HEC protocol in mainframe and also need to change format of character code to 7-bit ASCII if Mainframe data is in EBCDIC

Thank you and regards,

Obaidul

Re: Install UF/HF in Unisys Mainframe

richgalloway — Wed, 09 Jun 2021 12:50:37 GMT

By "code" I mean software (aka "a program"). It does not have to implement the "HEC protocol" since the HEC protocol is HTTP, which should be available on the mainframe. Splunk prefers text in UTF-8 so you'll need to convert EBCDIC to that.

Re: Install UF/HF in Unisys Mainframe

SplunkDash — Wed, 09 Jun 2021 15:46:08 GMT

Excellent, makes sense to me.....thank you so much, truly appreciated!

Kind Regards,

Obaidul

Re: Install UF/HF in Unisys Mainframe

SplunkDash — Wed, 16 Jun 2021 13:57:12 GMT

Do you know what tools/codes/programs we should use to push the data from UNIVAC to SPLUNK Indexer when we use HEC protocol? Thank you and truly appreciate your support in these efforts.

Re: Install UF/HF in Unisys Mainframe

richgalloway — Wed, 16 Jun 2021 15:05:38 GMT

I know next to nothing about UNIVAC systems so I can't help much. If the system supports Python then consider using George Starcher's Python class for sending data to HEC.

https://github.com/georgestarcher/Splunk-Class-httpevent

Re: Install UF/HF in Unisys Mainframe

ianhss — Thu, 14 Oct 2021 12:58:20 GMT

@SplunkDash Did you make any progress with this? I am interested to learn if you managed to get anything working for Unisys 2200.

Re: Install UF/HF in Unisys Mainframe

SplunkDash — Thu, 14 Oct 2021 14:54:42 GMT

Not yet....still facing challenges on the file/data structure on UNIVAC 2200 vs SPLUNK compatibilities and also find out the ways to run OS supported by SPLUNK computational agents (Like UF). Thank you so much appreciate your support.