topic Re: Config Data Input in Splunk Search

Config Data Input

hedima — Wed, 10 Aug 2011 11:32:51 GMT

i'm working on a master thesis wich splunk ist one of the software. I don't have very much experiance with splunk so i have some problems.

I want have some log datas from 3 produkts. I don't want use SNMP traps or syslog. So I have taken the folder analyse option. But there i have te big problem, that i could's get the informations.

Therefor I have the question if it is possible to get the information on that way or if someone know how i can get this data?

The Produkts are:
Avira Small Business Suite
Fortinet Analyzer 100C
Backup Exec Small Business Suite
HP Insight Manager

Thank you very much!

Re: Config Data Input

MuS — Wed, 10 Aug 2011 11:57:41 GMT

Hi hedima

basically you can add anything into splunk, like it is written in the docs
so if you have a non-binary log file of any of those application, splunk can read and index it for you.

regards,
MuS

Re: Config Data Input

piebob — Wed, 10 Aug 2011 14:42:46 GMT

as MuS says, Splunk will index any non-binary data. if you're testing it on new data, i'd recommend using a test index so you can iteratively try out different input configurations:
http://docs.splunk.com/Documentation/Splunk/latest/Data/Testyourinputs

Re: Config Data Input

hedima — Thu, 11 Aug 2011 00:26:05 GMT

Thanks a lot for your answers and the link. So i'm now back on trap 😉