can Splunk parse z/OS SMF data not using a third ... - Splunk Community

All Apps and Add-ons

It's easy to ingest a file, does Splunk know how to parse various SMF record types ?
Is there a free dashboard to report on SMF ?

hello there,

i think that you would have to use a third party tool (the only way ive seen it work) but i might be wrong.
maybe the following links can help:
https://conf.splunk.com/files/2016/slides/splunking-your-zos-mainframe.pdf (this one is around Syncsort product)
https://answers.splunk.com/answers/88172/getting-data-from-mainframe-system.html (very good answer in the same topic)
https://www.splunk.com/blog/2017/08/22/insane-in-the-mainframe-splunk-and-ibm-partner-to-provide-end... (IBM product)

hope it helps

Get Updates on the Splunk Community!

Vibe-coding, AI, and Splunkcraft: Highlights from the .conf26 Builder Bar

If you stopped by the Builder Bar at .conf26, thank you! This year, we brought ...

Thanks for the Memories: .conf26 Took Learning to New Heights

Thank you, Splunk Community, for making .conf26 in Denver one for the books. From packed Splunk University ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...