https://community.splunk.com/t5/Splunk-Search/Splunk-ingesting-MSMQ-Message/m-p/32053#M178148 <P>I have a legacy logging application that sends its messages to a MSMQ queue. Can splunk be configured to read data directly from the queue? Or do i need to write a listener application that reads the data and sends the message to Splunk via TCP?</P> Fri, 10 Aug 2012 15:04:31 GMT rick_harrison 2012-08-10T15:04:31Z https://community.splunk.com/t5/Splunk-Search/Splunk-ingesting-MSMQ-Message/m-p/32053#M178148 <P>I have a legacy logging application that sends its messages to a MSMQ queue. Can splunk be configured to read data directly from the queue? Or do i need to write a listener application that reads the data and sends the message to Splunk via TCP?</P> Fri, 10 Aug 2012 15:04:31 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-ingesting-MSMQ-Message/m-p/32053#M178148 rick_harrison 2012-08-10T15:04:31Z https://community.splunk.com/t5/Splunk-Search/Splunk-ingesting-MSMQ-Message/m-p/32054#M178149 <P>Hi,</P> <P>You can't read the MSMQ natively (it's not in the right format). You'll have to write a wrapper that either ports it to another TCP port and read it from there are write up a .net/vbscript and do a scripted input from there.</P> <P>~Kate</P> Fri, 10 Aug 2012 20:48:29 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-ingesting-MSMQ-Message/m-p/32054#M178149 Kate_Lawrence-G 2012-08-10T20:48:29Z https://community.splunk.com/t5/Splunk-Search/Splunk-ingesting-MSMQ-Message/m-p/32055#M178150 <P>Have you guys done any scripts in this sense? Is it working? I have a case in which we will try to collect MSMQ information to monitor queues in Splunk...any hint on that? I will appreciate any help in this matter, thanks!</P> Sat, 03 Aug 2013 20:59:33 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-ingesting-MSMQ-Message/m-p/32055#M178150 wagnerbianchi 2013-08-03T20:59:33Z https://community.splunk.com/t5/Splunk-Search/Splunk-ingesting-MSMQ-Message/m-p/32056#M178151 <P>There is a <A href="http://apps.splunk.com/app/1574/">modular input for MSMQ</A> that can consume the messages. It also has support for writing your own plug-ins (refer to <A href="https://gist.github.com/nczeczulin/6128867">IMessageHandler.cs</A>, and <A href="https://gist.github.com/nczeczulin/6129089">ExampleHandlerTemplate.cs</A>) to deserialize the body data before emitting to Splunk.</P> Thu, 20 Feb 2014 11:11:16 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-ingesting-MSMQ-Message/m-p/32056#M178151 nczeczulin_splu 2014-02-20T11:11:16Z