All Apps and Add-ons

Splunking OS/2 log

sd100
Explorer

Hello,
OS/2 is a 25 year old OS from IBM (remember?)
Is it possible to splunk OS/2?
Has anyone successfully done it?

Splunk can eat any file, but i'm wondering if we can access the OS/2 file system...

Any information would be great
Thanks
Simon

Tags (1)
0 Karma
1 Solution

MuS
SplunkTrust
SplunkTrust

Hi sd100

OS/2 supports NFS as client or server, at least you can find some stuff here.

This means you could either write your OS/2 logs to a mounted NFS share and Splunk them ..or.. write the logs into a NFS export, mount the NFS export on the indexer and Splunk the OS/2 logs.

but you also could

  • SCP your logs to the indexer
  • rsync your logs to the indexer
  • FTP your logs to the indexer
  • redirect your OS/2 logs as SYSLOG messages to the indexer, if possible
  • ....

many ways to get those logs into splunk 😉

cheers,
MuS

View solution in original post

MuS
SplunkTrust
SplunkTrust

Hi sd100

OS/2 supports NFS as client or server, at least you can find some stuff here.

This means you could either write your OS/2 logs to a mounted NFS share and Splunk them ..or.. write the logs into a NFS export, mount the NFS export on the indexer and Splunk the OS/2 logs.

but you also could

  • SCP your logs to the indexer
  • rsync your logs to the indexer
  • FTP your logs to the indexer
  • redirect your OS/2 logs as SYSLOG messages to the indexer, if possible
  • ....

many ways to get those logs into splunk 😉

cheers,
MuS

sd100
Explorer

Thank you MuS

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...