Deployment Architecture

Not receiving anything from UNIX forwarder

fzyqkl
New Member

I have successfully installed Splunk forwarders on 105 PCs and 7 LINUX machines. I cannot get any data from my unix machines Sun OS SPARC. I installed the SPARC forwarder 4.3. I keep getting errors in the splunkd.log file "Ignoring file 'filename' due to: binary". I am needing to read audit files and they are all binary. Does anyone have any experiance with this situation??

Tags (1)
0 Karma
1 Solution

jbsplunk
Splunk Employee
Splunk Employee

Splunk won't read binary data, presuming the data is actually Binary. If that is the case, you'll need to do something outside of Splunk to convert the binary data to text format, and then have Splunk read the text formatted files.

View solution in original post

jbsplunk
Splunk Employee
Splunk Employee

Splunk won't read binary data, presuming the data is actually Binary. If that is the case, you'll need to do something outside of Splunk to convert the binary data to text format, and then have Splunk read the text formatted files.

View solution in original post

.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!